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FOREWARD 


We, of the early decades at Pajarito Site, Los Alamos, were near a number of accidental 
bursts of radiation in the course of critical experiments. In the first of these, the person at the 
controls exclaimed “a disaster!” With a quarter-mile separation protecting operators, each of 
these “disasters” proved to be without consequence. Nevertheless, errors that led to them should 
have been avoided, and accounts of these accidents were disseminated to discourage recurrence. 

A serious process criticality accident at Los Alamos was another matter, because protection 
of operators was supposed to have been provided by criticality safety practices instead of built-in 
features such as shielding or distance. In this case, publication brought out obscure causes that 
demanded consideration in the discipline of criticality safety. 

The value of publication of both types of accident led William R. Stratton of the Pajarito 
Group to bring together all available descriptions in his A Review of Criticality Accidents, the 
linchpin of this account. 


Hugh C. Paxton 
Los Alamos, NM 
August 1999 



PREFACE 


This document is the second revision of A Review of Criticality Accidents . The first was 
issued as report LA-3611 in 1967 and authored by William R. Stratton. 1 At that time, he was a 
staff member in the Critical Experiments Group at Los Alamos and a member of the Atomic 
Energy Commission’s Advisory Committee on Reactor Safeguards. The first revision was pub¬ 
lished with the same title in 1989 as document NCT-04. 2 This revision was carried out by 
David R. Smith, a colleague of Stratton’s in the Critical Experiments Group during the 60’s and 
70’s and the Laboratory’s Criticality Safety Officer. In 1980, the criticality safety function was 
removed from the Critical Experiments Group and made a separate entity in the Laboratory’s 
Health and Safety organization with Smith as the first group leader. 

With the advent of cooperative research and information exchanges between scientists in the 
Russian Federation (Russia, R.F.) of the Former Soviet Union and Los Alamos National Labora¬ 
tory in the early 1990s, discussions began to investigate possible joint work in the field of nuclear 
criticality safety (to be referred to hereafter as simply “criticality safety”). By 1994, interactions 
were ongoing between Los Alamos and four Russian sites with criticality safety interests: the 
Institute of Physics and Power Engineering (IPPE) in Obninsk; the All Russian Scientific Re¬ 
search Institute of Experimental Physics (VNIIEF) in Sarov (formerly Arzamas-16); the All 
Russian Scientific Research Institute of Technical Physics (VNIITF) in Snezhinsk (formerly 
Chelyabinsk-70); and the Kurchatov Institute (KI) in Moscow. 

Criticality safety staff at IPPE have regulatory oversight responsibility for the four major 
fissile material production and handling sites where process facility criticality accidents have 
occurred. These are the Mayak Production Association (Mayak), the Siberian Chemical Combine 
(Tomsk-7) in Seversk, the Electrostal Machine Building Plant in Electrostal, and the Novosibirsk 
Chemical Concentrates Plant in Novosibirsk. Thus, criticality safety staff from these four sites 
were directly involved in the 13 Russian process accidents described herein. The other three 
institutes, Arzamas-16, Chelyabinsk-70, and the Kurchatov Institute have critical experiment and 
reactor development capabilities; accidents in this category have occurred at these sites. 

This report, planned to be published in both English and Russian language versions, is the 
fruit of cooperative efforts of criticality safety specialists in both countries. It not only includes 
all of the Russian criticality accidents, but also revises the US and UK process facility accidents 
reported in the second edition. The revisions to the US and UK process accident descriptions are 
mainly expansions of the text to include information that was previously only in reference docu¬ 
ments. In a few instances, technical corrections were necessary. The expanded descriptions are 
provided for the benefit of the broader audience that this document has been attracting over the 
years. 

Finally, as this report was almost to be printed in September 1999, a criticality accident 
occurred at the JCO fuel processing facility in Japan. Printing was delayed until this most recent 
accident could be fully understood and documented herein. It is the goal of the authors that with 
this expanded report, the causes of criticality accidents and their consequences will be better 
understood and the safety and efficiency of operations with significant quantities of fissile mate¬ 
rials will be enhanced. 
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A REVIEW OF CRITICALITY ACCIDENTS 


ABSTRACT 

Criticality accidents and the characteristics of prompt power excursions are discussed. Sixty 
accidental power excursions are reviewed. Sufficient detail is provided to enable the reader to 
understand the physical situation, the chemistry and material flow, and when available the admin¬ 
istrative setting leading up to the time of the accident. Information on the power history, energy 
release, consequences, and causes are also included when available. For those accidents that 
occurred in process plants, two new sections have been included in this revision. The first is an 
analysis and summary of the physical and neutronic features of the chain reacting systems. The 
second is a compilation of observations and lessons learned. Excursions associated with large 
power reactors are not included in this report. 


INTRODUCTION 

This revision of A Review of Criticality Accidents 1,2 
represents a significant expansion of the prior edition 
with the inclusion of one Japanese and 19 Russian 
accidents. In the first two parts of this report, 60 
criticality accidents are described. These are divided 
into two categories, those that occurred in process 
facilities (22), and thus were unexpected, and those that 
occurred during critical experiments or operations with 
research reactors (38). 

These two categories are based on the following 
considerations. Process facilities carrying out operations 
with fissile material avoid criticality accidents through 
physical and administrative controls. These controls are 
intended to prevent critical or near-critical configura¬ 
tions from ever occurring in the facility. Operating 
personnel are usually not technical experts in criticality 
physics. Under normal working conditions, however, 
operating personnel can be close to (arm’s length from) 
potentially critical configurations. In contrast, reactor 
and critical experiment research facilities purposefully 
plan and achieve near-critical and critical configura¬ 
tions. These operating personnel are usually experts in 
criticality physics. Although they carry out hands-on 
operations with fissile material under restrictions similar 
to those found in process facilities, the planned near- 
critical and critical configurations are performed under 
shielded or remote conditions. 

In most cases, the descriptions of the Russian 
accidents are somewhat lengthier than those that 
occurred in other countries. This is attributable to the 
lack of generally available references for the Russian 
accidents. In other words, the descriptive information in 
this report is all that is effectively available for these 
accidents. It has been gleaned from both the original 
Russian notes and discussions with those who had 
personal knowledge of the accidents. With the exception 
of the addition of the six Russian critical experiment 
accidents, Part II of this report is basically unchanged 
from that of the second edition. 


Although this edition is planned to be available in 
both English and Russian language versions, decisions 
had to be made concerning units and terminology, 
particularly in the English language version. We have 
attempted to conform to common international usage. 
However, units as originally reported are sometimes 
retained for historical accuracy. Also, we have chosen 
generally understood terminology and avoided terms 
that might be facility or industry specific. For example, 
the word “vessel” is used to describe most solution 
holding containers. Thus “filter vessel” is used instead 
of “filter boat,” a common U.S. chemical industry 
term. 

In Part III, a brief discussion of analytical methods 
and quenching mechanisms for power excursions is 
reproduced from the first revision. Two appendices are 
also new to this revision. Appendix A is a reproduction 
of LA-11627-MS, Glossary of Nuclear Criticality 
Terms 3 (supplemented with one additional definition) 
to assist the reader. In Appendix B diagrams of each of 
the 22 process vessels in which the accidents took 
place are shown along with tabular summaries of the 
system parameters (mass, volume, etc.). 

The emphasis of this revision has been threefold. 
First, it was to include the one Japanese and 19 
Russian accidents. Fourteen of these took place in 
process facilities and six happened during critical 
experiments and research reactor operations. A second 
focus of this effort has been to thoroughly review the 
eight process facility accidents described in the prior 
revision of this document and their supporting 
references. This led to some technical corrections and 
modest expansions of the process descriptions for the 
benefit of the expanded audience that this report has 
attracted over the years. Third, two analyses of the 22 
process accidents are included. These are (1) physical 
and neutronic characteristics with an emphasis on 
understanding systematic features and (2) observations 
and lessons learned from these accidents. 
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I. PROCESS ACCIDENTS 


The 22 criticality accidents that occurred during 
process operations are each described in one to several 
pages, accompanied by schematics and photographs 
when available. These are the accidents that are 
directly relevant to process criticality safety. In all 
cases the level of detail is sufficient to understand the 
physical conditions. The neutronic, physical, radiologi¬ 
cal, and human consequences of the accidents are 
presented. Causes are included for those accidents for 
which this information was reported in the original 
documentation or was available from those with first 
hand knowledge. 

As supplements to the descriptions, two new 
sections have been added to Part I of this revision. The 
first new section presents the results of simplified re¬ 
constructions of the physical and neutronic aspects of 
each accident. These re-constructions are compared to 
known conditions for criticality. In addition, the energy 
releases, both the first spike and the total excursion 
yield, are discussed with respect to expected values 
based on data from the SILENE, CRAC, and KEWB 
experiments. 4,5,6 Complementing this section is 
Appendix B that contains diagrams of the vessels in 
which the 22 accidents occurred and tables showing 
the parameters (fissile mass, volume, etc.) of the 
simplified re-constructions. 

In the second new section, observations and lessons 
learned, extracted from a thorough review of all of the 
accidents, are presented. This process was necessarily 
subjective since in many cases there were obvious 


operator actions that were directly related to the 
accident, but seldom were the operator’s thoughts 
reported. This summary of lessons learned should 
prove valuable as a training tool. It may also assist 
management by providing insight into major risk 
contributors thus helping to reduce risks and to prevent 
accidnts. 

A chronology of the accidents that occurred in 
process facilities is provided in Figure 1. Below are 
listed highlights of these 22 process accidents. 

• 21 occurred with the fissile material in solutions or 
slurries. 

• One occurred with metal ingots. 

• None occurred with powders. 

• 18 occurred in manned, unshielded facilities. 

• 9 fatalities resulted. 

• 3 survivors had limbs amputated. 

• No accidents occurred in transportation. 

• No accidents occurred while fissile material was 
being stored. 

• No equipment was damaged. 

• Only one accident resulted in measurable fission 
product contamination (slightly above natural lev¬ 
els) beyond the plant boundary. 

• Only one accident resulted in measurable exposures 
(well below allowable worker annual exposures) to 
members of the public. 


Russian Federation 


United States 


United Kingdom 


Japan 
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45 
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Figure 1. Chronology of process criticality accidents. 
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A. ACCIDENT DESCRIPTIONS 

The 22 accident descriptions are presented chrono¬ 
logically in this report without regard to country. 
Figures 2, 3, 4, and 5 are provided to orient the reader 
as to the accident locations in the Russian Federation, 
the United States, the United Kingdom, and Japan, 
respectively. The capital cities are also included, as 


well as Obninsk in Russia, where no accidents have 
occurred but where the Russian coeditors of this report 
work at the IPPE. The IPPE houses the regulatory 
body that oversees the four production sites (Mayak, 
Tomsk-7, Electrostal, and Novosibirsk), where the 
process accidents occurred. 
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Figure 2. Map of the Russian Federation showing the sites of the process criticality accidents, the capital, Moscow, and Obinisk, the location of the regulating 
authority, IPPE. 













Figure 3. Map of the United States showing the sites of the process criticality accidents, and the capital, Washington. 
































Figure 4. Map of the United Kingdom showing the site of the process criticality accident and the capital, London. 
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Figure 5. Map of Japan showing the site of the process criticality accident and the capital, Tokyo. 
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1. Mayak Production Association, 15 March 1953 

Plutonium nitrate solution in an interim storage vessel; single excursion; one serious exposure, one significant 
exposure. 


The accident occurred in a plutonium processing 
building. The plutonium had been recovered from 
irradiated uranium rods. After separation from the fuel 
rods, the plutonium in the form of nitrate solution, was 
put through several purification steps. Operations were 
performed on 6 hour shifts, 4 shifts per day. The 
building was not equipped with a criticality alarm 
system. 

Following purification, the plutonium nitrate 
solution was routed through a staging area before 
being sent on for further processing. Operations 
performed within the staging area included mixing, 
dilution, volume measurement, sampling for plutonium 
concentration and purity, and interim storage. Pluto¬ 
nium solution that failed purity requirements was 
returned for further purification. The staging area 
consisted of a concrete cell and adjacent space located 
in the corridor outside of the cell. Figure 6 shows the 
layout of the concrete cell and corridor. 

The staging area contained 15 identical short right 
circular cylindrical stainless steel vessels, each with a 
unique identification number. The vessels were 
400 mm in diameter and 320 mm high with the 
cylindrical axis oriented vertically. The staging area 
was not equipped with radiation monitoring instru¬ 
ments. Criticality control was implemented by a 
500 gram plutonium mass limit per vessel. Criticality 


safety support consisted of part time effort by a staff 
physicist. Operators were not trained in criticality 
safety. 

The 15 vessels were separated into 2 linear arrays. 
The first array containing 7 evenly spaced vessels was 
located near the back wall of the concrete cell. This 
array was installed in May 1952 and was supplied with 
solutions through permanently installed transfer lines. 
The concrete cell was 3 m wide, 2 m deep, and 2.5 m 
high. Top surfaces of the vessels were less than 1 m 
above the cell floor. Located in front of the array was a 
vertical, 200 mm thick cast-iron plate. In addition, a 
125 mm thick cast-iron top plate was located horizon¬ 
tally above the 7 vessels. This plate had cutout holes 
above each vessel to allow access for making hose 
connections. Cadmium plates were positioned verti¬ 
cally between the 7 vessels. Procedures required that, 
for criticality safety purposes, vessels 2, 4, and 6 never 
contain solution. This constraint was expected to 
reduce neutronic interaction between the vessels. 

The second array containing 8 evenly spaced 
vessels was located in the corridor outside the concrete 
cell. This second array was installed after realization 
that the first array had inadequate capacity for the 
volume of plutonium solution being processed. Each 
vessel in the array was individually shielded by 
approximately 175 mm of cast-iron on 4 sides and 
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Figure 6. Layout of vessels and equipment in the staging area. 
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with the concrete floor and wall on the remaining 2 
sides of the vessel. The criticality accident occurred in 
vessel 18. 

Staging operations involved solutions being 
transferred between vessels in an array and between 
arrays. Vacuum transfers between the two arrays were 
performed by manually connecting hoses up to 7 m in 
length. The vacuum system was located in a room 
adjacent to the concrete cell. To prevent plutonium 
solution from entering the vacuum system, a vacuum 
trap, located in the concrete cell, was used. This 
vacuum trap vessel was made of glass to allow for 
visual inspection. 

Procedures required that written instructions for 
each shift be reviewed by operating personnel at the 
beginning of the shift. A team of two or three people 
performed operations. Procedures also required that 
shift personnel review the results of solution sampling 
analysis. 

On Sunday, 15 March 1953, the written instructions 
alerted shift personnel that two transfers of plutonium 
solution were scheduled to arrive at the vessels in the 
concrete cell. Table 1 shows the contents of the seven 
vessels as recorded in the operational log before the 
accident. It should be noted that in violation of 
procedures, vessels 2 and 4 were in use, and the 500 
gram mass limit was being ignored. A plan was 
prepared to receive the first transfer of plutonium 
solution. The plan specified that the contents of 
vessels 2 and 4 were to be transferred to vessel 18, 
which was located in the second array. The operational 
log showed vessel 18 was empty. Based on the values 
in Table 1 and the assumption that vessel 18 was 
empty, this transfer would result in vessel 18 having 
the solution volume and plutonium mass given in 
Table 2. 

Two operators performed the transfer of solution 
from vessels 2 and 4 to vessel 18. One operator was 
positioned next to vessel 18 and the other was in the 
cell near vessels 2 and 4. Following completion of the 
transfers, the operator next to vessel 18 disconnected 
the hose. Immediately after disconnecting the hose, the 
operator noticed foaming and violent gas release from 
the vessel. With his hands the operator also observed 
that the vessel temperature was elevated well above 
room temperature. The operator in the cell noticed that 
solution had accumulated in the glass vacuum trap. The 
operator in the corridor immediately reconnected the 
transfer hose to vessel 18. Both operators then decided 
to transfer the contents of vessel 18 back to vessel 4. 
The loss to the vacuum trap during the excursion 
explains why criticality did not re-occur during this 
transfer. Water and nitric acid were then added to 
vessel 4 to dilute and cool the contents. The operators 
then split the contents of vessel 4 by transferring it to 
vessels 22 and 12 located in the corridor. 


Table 1. Contents of Vessels 1 through 7 as 
Recorded in the Operational Log Before the 
Accident. 


Vessel 

Number 

Solution 
Volume (£) 

Pu Mass 
(g) 

Pu Cone. 

(g/o 

1 

15.0 

672.0 

44.8 

2 

10.0 

58.0 

5.8 

3 

15.5 

567.0 

36.6 

4 

16.0 

566.0 

35.4 

5 

0.0 

0.0 

0.0 

6 

0.0 

0.0 

0.0 

7 

0.0 

0.0 

0.0 

Total 

56.5 

1863.0 




Table 2. The Expected Contents of Vessel 18 
after the Planned Transfer. 

Vessel 

Number 

Solution 
Volume (£) 

Pu Mass 
(g> 

Pu Cone. 

(g/O 

18 

26.0 

624.0 

23.8 


Neither of the two operators had any training in 
criticality safety and neither recognized that a critical¬ 
ity accident had occurred. They did not expect that 
there would be any health effects and they elected to 
not report their observations. They continued to 
perform the work of the shift by receiving 15.5 t of 
solution containing 614 g of plutonium into vessel 5. 

Two days following the accident, 17 March 1953, 
the operator positioned near vessel 18 at the time of the 
accident abruptly became ill and requested medical 
assistance. An investigation was started after the 
operator reported his illness. The investigation deter¬ 
mined that the operational log at the beginning of the 
shift on 15 March 1953 was in error (Table 1). The 
contents of vessel 1 at the beginning of the shift was 
actually 10 t of solution containing 448 g of pluto¬ 
nium, and not 15 t of solution with 672 g of pluto¬ 
nium. That is, vessel 1 contained 5 i less solution than 
was recorded in the operational log. The investigation 
also determined that the missing 5 i had been trans¬ 
ferred into vessel 18 before the beginning of the shift. 
Table 3 shows the actual contents of vessel 18 at the 


Table 3. The Actual Contents of Vessel 18 at the 
Time of the Accident. 

Vessel 

Solution 

Pu Mass 

Pu Cone. 

Number 

Volume (£) 

(g) 

(g/O 

1 

5.0 

224.0 

44.8 

2 

10.0 

58.0 

5.8 

4 

16.0 

566.0 

35.4 

Total 

31.0 

842.0 

27.2 
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time of the accident. However, the investigation was 
not able to determine who made the transfer or when it 
had taken place. 

As part of the investigation, both experiments and 
calculations were performed to estimate the conditions 
for criticality in vessel 18. The results determined that 
30 £ of solution containing 825 g of plutonium 
(27.5 g/ £) would be required for criticality. These 
values agree closely with the best estimate of the 
contents of vessel 18 at the time of the accident, 31 £ 
of solution with 848 ± 45 g of plutonium (27.4 gf £). 
One contributing cause of the accident was the 
unrecorded transfer of 5 £ of solution from vessel 1 to 
vessel 18. 

The accidental excursion resulted in approximately 
2 x 10 17 fissions. This estimate was based on a 
temperature increase of 60°C in 31 £ of solution. The 


60°C temperature rise was based on the coarse 
observation that the solution following the accident 
was at or near the boiling temperature. The accident 
caused no physical damage to any equipment. The 
operator positioned in the cell received an estimated 
dose of 100 rad. The operator near vessel 18 received 
an estimated dose of 1,000 rad. He suffered severe 
radiation sickness and amputation of both legs. He died 
35 years after the accident. 

Procedures in place before the accident were 
unambiguous in specifying that vessels 2, 4, and 6 
were to never contain solution. The presence of 
solution in vessels 2 and 4 at the beginning of the shift 
prior to the accident illustrates that procedures were 
being violated. The entries in Table 1 also shows that 
the mass limit of 500 g per vessel was being violated. 


2. Mayak Production Association, 21 April 1957 

Uranium precipitate, U(90), buildup in a filtrate receiving vessel; excursion history unknown; one fatality, five 
other significant exposures. 


This accident occurred in a large industrial building 
housing various operations with highly enriched 
uranium. Operations were being conducted under the 6 
hour shift, 4 shifts per day mode prevalent at Mayak. 
Rooms typically contained several gloveboxes sepa¬ 
rated from each other by about two meters and 
interconnected by various liquid transfer and vacuum 
lines. The accident took place in a filtrate receiving 
vessel that was part of batch mode, liquid waste 
processing and recovery operations. 

A layout of the glovebox and its equipment is 
shown in Figure 7. This was a typical one workstation 
deep by two workstations wide glovebox. The normal 
process flow was as follows: the main feed material, 
impure uranyl nitrate, was generated in upstream 
U(90) metal purification operations. This, along with 
oxalic acid, was introduced into the precipitation 
vessel, which was equipped with a stirrer and an 
external steam/water heating jacket. A batch would 
typically contain a few hundred grams of uranium feed 
in about 10 £ of liquid; concentration was usually in 
the 30 to 100 g U I £ range. The stirrer operated 
continuously during the process to prevent the accumu¬ 
lation of oxalate precipitate on the vessel bottom. 
Precipitation of the uranyl oxalate trihydrate proceeded 
according to the following reaction: 

uo 2 (no 3 ) 2 + h 2 c 2 o 4 + 3H 2 0 -» uo 2 c 2 o 4 • 3H 2 0 4 +2HNO s 


The oxalate precipitate slurry was then vacuum 
transferred to a holding tank from which it was drained 
into a filter vessel. The precipitate containing the 
uranium was collected on the filter fabric, and the 
filtrate was pulled through by vacuum and collected in 
a filtrate receiving vessel, where the accident took 
place. This vessel was a horizontal cylinder 450 mm in 
diameter by 650 mm in length and had a volume of 
approximately 100 £. As indicated in the figure, the 
filtrate was removed through a dip tube and transferred 
to an adjacent glovebox. 

A two tier hierarchy of procedures and requirements 
was in place at the time. Upper level documents 
described operations covering large work areas in 
general terms, while criticality guidance was contained 
in operating instructions and data sheets posted at each 
glovebox. Specifics associated with each batch, such as 
the fissile mass, time, temperature, and responsible 
operators, were recorded on the data sheets that were 
retained for one month. Important entries from the data 
sheets were transcribed to the main shift logs that were 
retained for one year. 

Operational and fissile mass throughput consider¬ 
ations dictated the design and layout of glovebox 
equipment. Thus, major pieces of equipment were not 
necessarily of favorable geometry. Limitation of the 
fissile mass per batch was the primary criticality 
control throughout the glovebox. The procedure called 
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Figure 7. Equipment layout for the oxalate precipitation 
and filtration process. 

for the U(90) mass per batch to be less than 800 g. The 
fissile mass was determined from the known volume 
and concentration of the uranyl nitrate. Historically this 
had resulted in relatively accurate fissile mass control. 
However, in spite of the fact that the operator followed 
the available procedures and did not violate criticality 
controls, there were several factors which contributed 
to the accumulation of uranium far in excess of that 
expected: 

• The temperature of the precipitating solution was an 
important process variable, but there was no moni¬ 
toring device such as a thermocouple. Temperature 
rise was controlled by the heating time, routinely 
about 10 minutes; the solution was not brought to 
boiling. In addition to temperature, the stoichiom¬ 
etry of the solution was important, but control of 
the uranium concentration was rather imprecise. 
Therefore the supernatant (the precipitate bearing 
liquid) that was fed to the filter vessel could have 
had an elevated temperature and/or acidity, result¬ 
ing in a higher uranium concentration than antici¬ 
pated. After the supernatant (now called the filtrate) 
entered the filtrate receiving vessel it would cool, 
resulting in additional precipitation of uranyl 
oxalate trihydrate and its slow accumulation into a 
hard, thin crust over much of the lower inside of the 
filtrate receiving vessel. 

• While not known for sure, it was suspected that 
minor defects in the filter fabric might also have 
contributed to an increased rate of precipitate accu¬ 
mulation in the filtrate vessel. Procedures called for 
the filter fabric to be replaced based on either visual 
evidence of defects or unusually high flow rates 
through the filter. 


• Operating instructions required a fissile mass ac¬ 
countability balance between the incoming and 
product fissile streams. If the difference was less 
than 5%, then the next batch could be introduced 
into the glovebox; but if the difference exceeded 
5%, then it was required that the vessels be cleaned 
out. Operating procedures required that these ves¬ 
sels be cleaned out on a specified schedule; how¬ 
ever, there was apparently no limitation on the 
number of batches that could be processed between 
cleanings if the 5% threshold was not exceeded. 
Also, there was no tracking of the fissile mass as it 
accumulated between cleanings. 

• There was no on-line instrumentation for measuring 
process parameters such as uranium concentration 
or accumulation in the receiving vessel. 

• There was no operationally convenient way to 
visually inspect the inside of the receiving vessel. 

• Finally, a likely major contributor to the accident 
was a procedural change that had occurred two 
months before. In an attempt to minimize personnel 
contamination and process downtime associated 
with the previous practice of routine physical/me¬ 
chanical cleaning of the vessels, it was decided that 
a simple acid flushing of the vessels would be ad¬ 
equate. Two months after the implementation of this 
procedural change, the accident occurred. 

While not a requirement for criticality control, the 
radiation control personnel routinely checked for 
uranium buildup with portable gamma-ray instruments 
from outside of the glovebox. They had not reported 
any increase in the normal background radiation field 
before the accident. 

The criticality accident occurred during what was 
thought to be routine vacuum filtration of a batch of 
uranyl oxalate trihydrate precipitate slurry. Looking 
though the glovebox window, the operator observed the 
filter vessel fabric bulge upward, followed by a violent 
release of gas and ejection of some of the precipitate 
out of the filter vessel and onto the glovebox floor. The 
operator instinctively gathered up the precipitate by 
hand and put it back into the filter vessel. Immediately 
after (seconds, not minutes), the operator began to feel 
ill. The release of gas or vapor continued for about 
10 minutes, at which time sufficient solution had been 
ejected from the filtrate receiving vessel into the 
vacuum trap of an adjacent glovebox to cause the 
excursion to stop. 

There was no criticality alarm system or other 
means for alerting the operator or nearby personnel 
that a criticality accident had occurred. Furthermore, 
the operators had no criticality safety training. Origi¬ 
nally, the circumstantial evidence of the gas release in 
the filter vessel and the sudden sickness of the operator 
were puzzling to the operational personnel in the room. 
The fact that a criticality accident had occurred was 
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determined by a radiation control person called to the 
scene. Measurements indicated that an intense gamma 
radiation field was emanating from the filtrate receiv¬ 
ing vessel. These measurements were made about 15 to 
20 minutes after the accident. The radiation control 
person immediately ordered a prompt evacuation of the 
area. 

About 5.5 hours after the event, the exposure rate 
was measured to be 18 R/h at a distance of 1.5 m from 
the filtrate receiving vessel. It was estimated that this 
exposure rate corresponded to a fission yield of 
approximately 1.0 x 10 17 fissions. Seventeen hours 
after the accident, measurement of the specific activity 
of the 24 Na in the operator’s blood showed 
245 Bq/cm 3 . Based on analysis done at that time, this 
activity was consistent with an absorbed whole body 
dose of about 3,000 rad. The operator died twelve days 
after the accident. 

Five other operators had been in the room at varying 
distances from the reacting vessel at the time of the 
accident. They received doses estimated to be upwards 


of 300 rad. All of them suffered from temporary 
radiation sickness but recovered without apparent 
long-term health effects. 

After dismantling the glovebox and cleaning the 
various pieces of equipment, a total of 3.06 kg of 235 U 
was discovered in the filtrate receiving vessel. This 
material was primarily in two forms: a thin, hard crust, 
due to long-term buildup, and a flocculent precipitate, 
the concentration of which decreased with height in the 
vessel. The accident caused no mechanical damage to 
this vessel, and the room was not contaminated. The 
glovebox was taken apart, cleaned, and reassembled 
with essentially the original equipment. The operation 
was resumed after just a few days. During the down¬ 
time, a radiation meter was installed on the glovebox, 
operating instructions were revised, and enhanced 
operator training was implemented. 

This accident led to the decision to set up an in- 
plant critical experiment measurement capability to 
better determine critical parameters for vessels in 
routine use. The next criticality accident at Mayak on 
2 January 1958 involved this critical experiment set up. 


3. Mayak Production Association, 2 January 1958 

Uranyl nitrate solution , U(90), in an experiment vessel; one prompt critical burst; three fatalities one serious 
exposure. 


This particular accident was unique in that it 
occurred during operations with a vessel used for in- 
plant critical experiments. However, since the accident 
occurred well after the cessation of an experiment and 
during handling operations associated with transferring 
the fissile solution into favorable geometry bottles, it 
has been categorized as a process criticality accident. 

After the 21 April 1957 accident, it was decided to 
set up a small-scale experiment capability for measur¬ 
ing the critical parameters of high concentration, 
highly enriched uranyl nitrate solution. This was 
deemed necessary in light of the widespread use of 
unfavorable geometry process vessels, the uncertainties 
in the critical parameters, and in recognition of two 
prior criticality accidents at the same plant. Previously, 
critical vessel dimensions and critical solution concen¬ 
trations, masses, and volumes were estimated based on 
calculations, since directly applicable experimental 
results were unavailable in Russia at that time. The 
experimental capability was set up in the same building 
where large volumes of this material were being 
processed, giving efficient access to the fissile solution. 

The small critical experiment setup, shown in 
Figure 8, was located in a separate room in the main 
process building. It had only been in operation for two 
months at the time of the accident. During measure¬ 
ments, the critical experimenters worked at a control 


panel located a few meters away from the setup and 
shielded by a 500 mm thick, water-filled slab tank 
located 600 mm from the experiment vessel. There 
were no criticality alarms installed in the building. 

This was the first day of work after the New Year’s 
holiday. While the plant generally ran continuously on 
four 6-hour shifts daily, there was only one team of 
critical experimenters. They were working on their first 
shift of the new year, 13:00 to 19:00. Other plant 
operators were involved in preparing the fissile 
solution and in assembling the experimental apparatus, 
but the critical experiments were performed solely by 
this dedicated, knowledgeable team. 

The prior series of experiments had focused on 
determining critical parameters for smaller vessels and 
had been concluded before the end of the year. During 
the last working days of December the equipment for 
the next experimental series had been assembled. This 
was the first experiment conducted with this larger 
vessel. It was a cylindrical stainless steel vessel, 

750 mm inside diameter, with a wall thickness of 2 to 
4 mm, representative of the vessels in common use at 
the facility. The fissile solution, of known concentra¬ 
tions and volumes, was added from an overhead, 
graduated cylinder 3 i in capacity. 

The experiment vessel was bolted to a stand and sat 
atop an 8 mm thick steel support plate approximately 
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Figure 8. Layout of the experimental equipment. 

0.8 m above the concrete floor and at least 1.5 m from They immediately noticed a flash (due to 

any walls. Thus it was without appreciable reflection, Cherenkov radiation), and simultaneously, fissile 

approximating many in-plant situations. The vessel solution was violently ejected, reaching the ceiling 

capacity was in excess of 400 £, permitting critical about 5 m above. The three experimenters dropped the 

states to be measured over a wide range of conditions. A vessel and, along with a fourth experimenter who was 

central guide tube accommodated a neutron source, and located about 2.5 m away from the excursion, went 

the leakage neutron flux was monitored with a immediately to the change room, showered, and were 

BF 3 proportional counter located beneath the tank. transported to the hospital. The combination of 

Approach-to-critical measurements employed the additional reflection from the three experimenters and 

standard inverse multiplication technique. the change in the geometry of the solution volume was 

After each experiment was completed, written sufficient to cause the system to exceed prompt critical, 

procedures called for the solution to be drained through The small neutron background, estimated at only 

a line to favorable geometry 6 liter bottles. This process 100 neutrons per second, apparently also contributed to 

was to be repeated until the entire experiment vessel had delayed initiation and thus to increased excursion 
been drained. After filling some of these 6 liter bottles, energetics. 

the experimenters judged the remaining solution volume Based on fission product activity in the solution, the 

to be highly subcritical. It was then decided to circum- single-pulse yield was evaluated to be approximately 

vent the routine, tedious draining process and manually 2 x 10 17 fissions. Total neutron and gamma absorbed 

pour the remaining solution of 418 g U(90)/ £ from the doses were estimated at 6,000 ± 2,000 rad for the three 

vessel (there are no records of the molarity of the who lifted the tank and 600 rad for the coworker at 

solution). To accomplish this, the neutron source and its 2.5 m. The three massively exposed workers died in 

guide tube were removed and then the vessel was five to six days. The fourth experimenter survived but 

unbolted from its stand. Then three of the experimenters had acute radiation sickness, followed by continuing 
manually lifted the vessel and began to move it (in order health problems. She developed cataracts* and lost 

to directly pour the contents into containers) when the sight in both eyes some years later. Due to the severe 

excursion occurred. 


*While the likelihood of contracting cataracts is significantly increased for hundreds of rad doses, there is not a direct one-to-one 
correlation. 
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consequences of this accident, the experimental 
apparatus was disassembled and the critical experiment 
program at the plant was terminated. 

Some of the factors that contributed to the accident 
are listed below. 

• Violation of the procedure that stipulated the com¬ 
plete draining of the experiment solution into 6 liter 
bottles. 

• Unbolting and removing the experiment vessel 
when it contained solution. This was not specifi¬ 
cally permitted in the operating procedure. 


• The design of the experiment stand that made it 
relatively easy to unbolt and remove the experiment 
vessel. 

• The additional reflection provided by the operators 
and by lowering it closer to the floor. 

• The lack of knowledge and awareness of the opera¬ 
tors as to the large reactivity changes that can occur 
with shape changes of solutions having H/D « 1. 


4. Oak RidgeY-12 Plant, 16 June 1958 7 ’ 8 ’ 9 ’ 10 

Uranyl nitrate solution , U(93), in a water collection drum; multiple excursions; seven significant exposures. 


This accident occurred in the C-l Wing of Building 
9212 in a process designed to recover enriched 
uranium, U(93) from various solid wastes. The solid 
wastes would be dissolved in nitric acid, purified, 
concentrated, and then converted to uranium tetrafluo- 
ride. A similar system, using newer technology, had 
been installed and was operating in the B-l Wing of 
the building. However, because of delays in the startup 
of UF 4 conversion equipment, the solution it produced 
was being transferred to the C-l Wing for final 
conversion. 

In the days immediately before the accident, the 
entire facility (Building 9212) had been shutdown for a 
fissile material inventory. Due to the complexity of the 
facility, the inventory required several days, and not all 
processes were restarted and stopped at the same time. 
By the day of the accident, production had already 
resumed in the B-l Wing but had not in the C-l Wing. 

Figure 9 is a simplified diagram of the C-l Wing 
vessels and equipment involved in the accident. The 
inventory required the disassembly and cleaning of the 
three, 5 inch (127 mm) diameter vessels* (FSTK 1-2, 
FSTK 6-1, FSTK 6-2) used to store uranyl nitrate 
solution. Before resumption of operations, it was 
necessary to reassemble and to leak test the vessels. 
This entire process usually required several, 8-hour 
shifts to complete. 

At -01:00 during the shift preceding the accident 
(23:00 Sunday, 15 June, to 07:00 Monday, 16 June), 
the C-l Wing supervisor noted that uranyl nitrate 
solution was present in a 6 inch (152 mm) diameter 
glass standpipe that was part of the pH adjustment 
station (Figure 9). He instructed an operator to drain 
the standpipe. At 05:00, the supervisor again noted 
uranyl nitrate in the standpipe and questioned the 
operator as to whether it had been drained earlier. The 
operator confirmed that it had been, and upon further 


investigation, they determined that solution was 
leaking into the standpipe through valve V-2. The 
valve was closed, and the standpipe was again drained. 

At 07:00, on 16 June, the routine shift change 
occurred and the C-l Wing supervisor was relieved. 
Accounts as to whether he informed his replacement of 
the uranyl nitrate leakage incidents were conflicting, 
but there was no mention of it in the operating log. 

At 08:00 an additional C-l Wing supervisor arrived. 
Among other tasks, one of his duties was to oversee 
the leak checking of the three vessels. The vessels had 
been cleaned and reassembled the previous week. 
Furthermore, operations had not resumed in the C-l 
Wing. Because of this information, the supervisor 
considered it unnecessary to check the vessel level 
indicator panel or to be concerned about the open or 
closed condition of any of the vessel valves. The 
supervisor assigned two operators to leak check the 
three vessels (which simply involved filling them with 
water), giving them specific instructions to check 
valve V-l because the B-l Wing had resumed 
operations. 

Unknown to anyone at the time, uranyl nitrate had 
been leaking from the B-l Wing through valve V-l 
from the early hours of the previous shift until about 
13:30, when one of the operators checked it (and by 
applying pressure completely closed the valve), as 
instructed by the supervisor. Before this, the uranyl 
nitrate had been collecting in vessel FSTK 1-2, 
because valve V-3 had also been open. 

Shortly before 14:00, the operators completed the 
leak check of vessels FSTK 6-1 and 6-2, and opened 
valves V-4, V-5, and V-ll to drain the water from 
these vessels into a 55 gallon (208 £) drum. One of the 
operators remained near the drum (as was the general 
practice during leak checking) specifically to monitor 
the situation for any unusual conditions. Because 


*The spacing and dimensions of the pipes were such that they could not be made critical for the intended solutions. 
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pH Adjustment Station 


valve V-3 was already open, and the flow pattern from 
the three vessels was such that any liquid in vessel 
FSTK 1-2 would flow into the drum first, the uranyl 
nitrate solution preceded the water. At approxi¬ 
mately 14:05, the operator looked into the drum and 
noticed yellow-brown fumes rising from the liquid. He 
stepped away from the drum and within a few seconds 
saw a blue flash indicating that an excursion had 
occurred. Almost immediately thereafter, the criticality 
alarm sounded, and the building was evacuated. Further 
flow of water increased the uncompensated reactivity 
for about 11 minutes, then decreased it. The solution 
became subcritical after about 20 minutes. 

Later studies determined that a full 15 minutes 
elapsed between the time valve V-l 1 was opened and 
the system reached the critical point. It is unknown why 
the operator stationed near the drum (6 years of experi¬ 
ence with uranium processing) did not notice the yellow 
colored uranyl nitrate pouring into the drum. 

At the time the system became critical, the solution 
volume is thought to have been -56 i in a cylinder that 
was 234.5 mm high and 552 mm in diameter. The 
235 U mass at the time was 2.1 kg, with 0.4 kg being 
added later, while water was further diluting the system. 
During the excursion a radiation detection instrument 
(boron lined ionization chamber, amplifier, and re¬ 
corder) operating -430 m from the accident location 
was driven off the scale by the radiation intensity. The 
trace from this detector also shows that about 15 
seconds after the initial excursion it was again driven off 
scale. During the next 2.6 minutes, the trace oscillated 
an indeterminate number of times. It is possible that the 
oscillations were decreasing in amplitude, although it 
cannot be confirmed by examining the trace. This was 
followed for 18 minutes by a slowly decreasing ramp, 
about five times above background. 

The excursion history can be reconstructed only 
qualitatively. The most likely source of initiation was 


neutrons from (a ,n) with the oxygen in the water. Thus, 
it is possible that the system reactivity slightly exceeded 
prompt criticality before the first excursion. The reactiv¬ 
ity insertion rate was estimated to be about 17 0/s at the 
time. The size of the first spike must have been deter¬ 
mined by the reactivity attained when the chain reaction 
started. Although there is no way to be certain, a reason¬ 
able estimate is that the first spike contributed about 
6 x 10 16 fissions of the total yield of 1.3 x 10 18 fissions. 
The second excursion, or spike (which also drove the 
recording pen off the scale), occurred in 15 seconds, a 
quite reasonable time for existing radiolytic gas bubbles 
to have left the system. The excursions for the next 

2.6 minutes appear to have been no greater than about 

1.7 times the average power. 

The trace suggests that most of the fissions occurred 
in the first 2.8 minutes, in which case the average power 
required to account for the observed yield is about 
220 kW. After this, the system probably started to boil, 
causing a sharp decrease in density and reactivity and 
reducing the power to a low value for the final 
18 minutes. 

Figure 10 is a photograph taken of the 55 gallon drum 
shortly after the accident. There was no damage or 
contamination. Eight people received significant radia¬ 
tion doses (461, 428, 413, 341, 298, 86.5, 86.5, and 
28.8 rem). At least one person owes his life to the fact 
that prompt and orderly evacuation plans were followed. 
One person survived 14.5 years, one 17.5 years, the 
status of one is unknown, and five were alive 29 years 
after the accident. 

Shortly after the accident, a critical experiment was 
performed at the Oak Ridge National Laboratory 
(ORNL) that simulated the accident conditions. This was 
done to provide information about probable radiation 
exposures received by the people involved in the 
accident. 

The plant was returned to operation within three days. 
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Figure 10. Drum in which the 1958 Y-12 process criticality accident occurred. 
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5. Los Alamos Scientific Laboratory, 30 December 1958 1112 

Plutonium organic solution in an organic treatment tank; single excursion; one fatality, two significant exposures. 


The operations performed at the facility where the 
accident occurred were those chemical steps used to 
purify and concentrate plutonium from slag, crucible, 
and other lean residues that resulted from recovery 
processes. Typical and expected solutions contained 
less than 0.1 g Pu / £ and traces of americium. An 
annual physical inventory was in progress at the time 
of the accident; thus, the normal flow of process 
streams into the area was interrupted so that residual 
materials in all process vessels could be evaluated for 
plutonium content. This accident occurred at 16:35 
near the end of the last workday before the New Year’s 
holiday. 

A reconstruction of significant events indicates that 
unexpected plutonium rich solids, which should have 
been handled separately, were washed from two 
vessels into a single large vessel that contained dilute 
aqueous and organic solutions. After most of the 
aqueous solution had been removed from this vessel, 
the remaining approximately 200 £ of material, 
including nitric acid wash, was transferred to the 
1,000 i, 1000 mm diameter, stainless steel tank in 
which the accident occurred. The tank contained about 
295 £ of a caustic stabilized aqueous organic emul¬ 
sion, and the added acid is believed to have separated 
the liquid phases. 

The aqueous layer (330 £) is estimated to have 
contained 60 g of plutonium; the organic layer (160 £) 
contained 3.1 kg of plutonium (Figure 11). A photo¬ 
graph of the tank is shown in Figure 12. Analyses 
indicate that this 203 mm thick layer was perhaps 5 $ 
below delayed criticality and that the critical thickness 
was 210 mm. When the stirrer was started, the initial 
action forced solution up the tank wall, displacing the 
outer portion of the upper layer and thickening the 
central region. The motion changed the system 
reactivity from about 5 $ subcritical to superprompt 
critical, and an excursion occurred. None of the 
y-sensitive recording meters within range of the 
accident showed a definitive trace; they did suggest, 
however, that there was a single spike. The excursion 
yield was 1.5 x 10 17 fissions. 

Based on post excursion experiments in a similar 
geometry vessel, there was no apparent delay between 
start and full speed of the stirrer, 60 revolutions per 
minute. After 1 second (1 revolution), there was visible 
movement or disturbance on the surface, and in 2 or 3 
seconds the system was in violent agitation. From 
these observations it can be concluded that the system 
could have been made critical in about 1 second; while 
bubble generation must have been the dominant 
feedback mechanism for terminating the first spike, the 
system was permanently driven subcritical by the 


mixing of the layers. The average plutonium content in 
the fully mixed solution was 6.8 g/ £, a value less than 
the limiting critical concentration for an infinite 
homogeneous metal-water system. 

From these time intervals and the estimate that 
initially the system was 5 $ subcritical, the reactivity 
insertion rate would have been about 5 $/s. Using 
coefficients appropriate for the solution, this insertion 
rate leads to a spike yield of 2.2 x 10 17 fissions with 
the spike completed in 1.65 seconds, that is, 0.45 
seconds after prompt criticality was reached. To obtain 
the observed yield (1.5 x 10 17 fissions) in a single 
spike, the reactivity insertion rate would have to be 
reduced to about 2 $/s. Because this is inconsistent 
with the time involved (about 3 seconds before 
complete mixing), the only alternative is to assume that 
the rate was somewhat less than 5 $/s and that the 
excursion was terminated in about 3 seconds by the 
stirring action. One can surmise that the initial action 
was thickening of the upper layer at the same time 
reflection was added by the aqueous liquid. This was 
followed almost immediately by distortion into a less 
critical, vortex-like shape by the action of the stirring 
blades and then permanent shutdown due to a uniform 
concentration of less than 7 g/ £. 



Figure 11. Configuration of solutions (aqueous and 
organic) in the vessel before the accident. 
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The entire plutonium process area had been 
reviewed by the Laboratory’s Nuclear Criticality 
Safety Committee about a month before the accident. 
Plans were underway to replace the large-volume 
process vessels with a bank of more favorable geom¬ 
etry, limited diameter pipe sections (6 inches in 
diameter by 10 feet long each). Administrative controls 
that had been used successfully for more than 7 years 
were considered acceptable for the additional six to 
eight months that would be required to obtain and 
install the improved equipment. 

Following the accident, procurement of favorable 
geometry equipment was accelerated and installation 
was completed before restarting operations. The 


downtime was about six weeks. To provide enhanced 
safety, improved techniques for the sampling of solids 
were implemented and the importance of adherence to 
procedural controls was emphasized. 

The accident resulted in the death, 36 hours later, of 
the operator who was looking into a sight glass when 
the motor was turned on. The dose to his upper torso 
was estimated to have been 12,000 ± 50% rem. Two 
other persons apparently suffered no ill effects after 
receiving radiation doses of 134 and 53 rem. No 
equipment was contaminated or damaged even though 
the shock associated with off-axis bubble generation 
displaced the tank about 10 mm at its supports. 



Figure 12. Vessel in which the 1958 Los Alamos process criticality accident occurred. 
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6. Idaho Chemical Processing Plant, 16 October 1959 13 

Uranyl nitrate solution , U(91), in a waste receiving tank; multiple excursions; two significant exposures. 


This accident occurred in a chemical processing 
plant that accepted, among other items, spent fuel 
elements from various reactors. The fissile material 
involved in the accident (34 kg of enriched uranium, 
U(91), in the form of uranyl nitrate concentrated to 
about 170 g U/£) was stored in a bank of cylindrical 
vessels with favorable geometry. The initiation of a 
siphoning action, inadvertently caused by an air 
sparging operation, resulted in the transfer of about 
200 £ of the solution to a 15,400 £ tank containing 
about 600 £ of water. 

Before the accident, a campaign was underway to 
process stainless steel clad fuels by sulfuric acid 
dissolution followed by impurity extraction in three 
pulse columns. Intermediate between the first and 
second cycle extraction, the solution was stored in two 
banks of 125 mm diameter by 3050 mm long pipe 
sections, often referred to as pencil tanks. There was a 
line leading from the interconnected banks of pencil 
tanks to the 5000 gallon (18900 £) waste receiving 
tank, but it was purposefully looped 600 mm above the 
top of the tanks to avoid any possibility of gravity drain 
from the pencil tanks to the waste tank. Only deliberate 
operator actions were thought capable of effecting 
transfers to the waste tank. 

On the day of the accident the operators, following 
routine written procedures, initiated sparging opera¬ 
tions to obtain uniform samples for analysis. While the 
pressure gauge that indicated the sparge air flow was 
showing expected pressures from one of the banks, the 
gauge associated with the other bank was not function¬ 
ing. There was not another gauge on this bank and the 
operator proceeded to open the air (sparge) valve until 
circumstantial evidence indicated that the sparge was 
operating. However, the air sparge was apparently 
turned on so forcefully that it caused the liquid to rise 
about 1,200 mm, from the initial liquid height in the 
pencil tanks to the top of the loop leading to the waste 
tank, which initiated a siphoning action. 

Although the siphoning rate was 13 liters per 
minute, it is difficult to relate this directly to the 
reactivity insertion rate since it also depended on the 
degree of mixing. The reactivity insertion rate could 
have been as high as 25 0/s. Because the 2.73 m 
diameter by 2.63 m long waste receiving tank was 
lying on its side, the solution configuration approxi¬ 
mated a near infinite slab. Waves in the solution could 
have caused large fluctuations in the system reactivity. 
After the accident, much of the uranyl nitrate was 
found crystallized on the inner walls of the tank, and 
most of the water had evaporated. The resulting 


excursions generated 4 x 10 19 fissions, sufficient to 
boil away nearly half of the 800 £ solution volume that 
eventually terminated the excursions. 

The excursion history is a matter of conjecture. 
There were only strip chart recordings from continuous 
air monitors at various distances from the tank. Some 
of these apparently stopped recording upon being 
driven to a very high level while those in lower 
radiation fields (generally farther away) may have been 
influenced by fission product gases. It is not unreason¬ 
able to assume that an initial spike of at least 10 17 fis¬ 
sions was followed by multiple excursions and, finally, 
by boiling for 15 to 20 minutes. The very large yield is 
a result of the large volume of the system and the 
relatively long duration, rather than of the violence of 
the excursion tank. 

Because of thick shielding, none of the personnel 
received significant prompt gamma or neutron doses. 
During evacuation of the building, airborne fission 
products (within the building) resulted in combined 
beta and gamma doses of 50 rem (one person), 32 rem 
(one person), and smaller amounts to 17 persons. 

While the evacuation proceeded relatively rapidly, the 
general evacuation alarm was never activated; it was a 
manually activated system. The reason offered was that 
the accident occurred during the graveyard shift, and 
the small workforce left their work areas promptly and 
were all accounted for at the guard station. Afterwards 
it was acknowledged that local radiation alarms 
sounded relatively frequently and had somewhat 
conditioned operators to not evacuate until the second 
or third separate alarm had sounded. 

It was also noted that the normal building egress 
was used by all personnel; none used the prescribed 
and clearly marked evacuation route. This led to a 
bottleneck at the exit point, which could have been 
severe during the day shift with ten times as many 
workers present. Thus exposures could probably have 
been reduced somewhat if immediate evacuation by the 
proper route had occurred. Equipment involved in the 
excursion was not damaged. 

Several factors were identified by investigating 
committees as contributing to the accident: 

• the operators were not familiar with seldom used 
equipment, the banks of pencil tanks, and their 
controlling valves. 

• there was no antisiphon device on the line through 
which the siphoning occurred. It was noted that 
such devices were installed on routinely used tanks. 

• operating procedures were not current nor did they 
adequately describe required operator actions such 
as the need for careful adjustment of the air sparge. 
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7. Mayak Production Association, 5 December 1960 

Plutonium carbonate solution in a holding vessel; multiple excursions; insignificant exposures. 


This accident occurred in a building where waste 
solutions were processed for the recovery of pluto¬ 
nium. The recovery consisted of three successive 
stages of purification, each using oxalate precipitation 
performed in a batch mode. The operation took place 
in two gloveboxes located in a 5 by 6 meter room. 
Procedures called for two operators to control the 
systems in the room. A criticality alarm system was 
operational in the building at the time of the accident. 

Figure 13 (not to scale) shows the five vessels 
located in glovebox 10 and the holding vessel located 
outside but connected directly to vessels inside the 
glovebox. Table 4 lists the seven vessels related to the 
reconstruction of the accident, along with their 
locations, dimensions, and function in the recovery 
operation. The operation began with a transfer of 
plutonium nitrate waste solution to vessel R0 in 
glovebox 9 where the first purification step was 
performed. This involved an oxalate precipitation of 
the plutonium, followed by a decanting of the superna¬ 
tant liquid containing the impurities as well as some 
plutonium, and then re-dissolution of the plutonium 
into a carbonate solution. The end product from R0, 
the plutonium carbonate solution, was then transferred 
to either vessel R1 or R2 in glovebox 10 for the second 
purification (oxalate precipitation, supernatant decant¬ 
ing, re-dissolution) step. Vessels R1 and R2 were 
identical in dimensions and functions and were 
operated in parallel to increase productivity. The end 


product from vessels R1 or R2 (again a plutonium 
carbonate solution) was then transferred to the holding 
vessel in preparation for batch transfer to vessel R3 
where the last purification step was performed. The 
product from vessel R3, an oxalate precipitate slurry, 
was then vacuum transferred to the filter vessel via the 
transfer vessel. The oxalate precipitate collected by 
the filter vessel was then sent to another location for 
calcination. 

Vessels R1 and R2 were equipped with transfer 
lines from R0 and to the holding vessel. The vessels 
also had stirrers and openings on top where a funnel 
could be used to add powdered reagents. The superna¬ 
tant discharge lines (to vessels where the plutonium 
was concentrated by boiling and eventually returned to 
the recovery process) and the liquid chemical reagent 
supply lines are not shown. The supernatant typically 
had plutonium concentrations of about 0.1 g/ £. Both 
vessels were shielded with 25 mm of lead. The holding 
vessel was unshielded and located about 400 mm 
above the concrete floor. The holding vessel was 
equipped with receiving lines from vessels R1 and R2, 
a transfer line to vessel R3, a vacuum line, and a 
compressed air line. Vessel R3 had lines and equipment 
identical to those of vessels R1 and R2. However, in 
the case of vessel R3, were solutions were received 
from the holding vessel and then sent out to the 
transfer vessel. Vessel R3 was also shielded by 25 mm 
of lead. 


From R0 in Glovebox 9 



Figure 13. Layout of vessels in Glovebox 10 and the holding vessel external to the glovebox. 
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Table 4. The Seven Vessels Related to the Reconstruction of the Criticality Accident. 


Vessel 

Designation 3 

Vessel 

Location 

Vessel 

Diam. 

(mm) 

Vessel 

Height 

(mm) 

Approx. 
Vessel Volume 
(£) 

Vessel Function 

R0 

G-9 b 

500 

900 

180 

First oxalate precipitation 

R1 

G-10 b 

400 

500 

60 

Second oxalate precipitation 

R2 

G-10 

400 

500 

60 

Second oxalate precipitation 

Holding Vessel 0 

Outside 

G-10 

350 

450 

40 

Sample extraction and solution 
staging between R1 or R2 and R3 

R3 

G-10 

300 

400 

27 

Third oxalate precipitation 

Transfer Vessel 

G-10 

250 

300 

15 

Transfer precipitate from R3 to 
filter vessel 

Filter Vessel 

G-10 

— 

— 

4 

Collected precipitate while 
passing lean solution 


a All seven had vertical axes of cylindrical symmetry. 
b G-9 = Glovebox 9, G-10 = Glovebox 10 
c Accident location 


At approximately 22:25 on 5 December, an operator 
working alone in the room initiated a vacuum transfer 
of carbonate solution from vessel R2 to the holding 
vessel. Shortly after starting the transfer the operator 
noticed that one of the criticality alarm system detec¬ 
tors located about 4.5 m from the holding vessel was 
sounding intermittently. The detector had a dynamic 
range of 10 to 3,600 mR/h and was set to trigger at 
110 mR/h. Without stopping the transfer, he left the 
room to report this observation to the shift supervisor. 
His decision to leave the room may have saved his life; 
shortly after his departure the entire alarm system 
began sounding continuously. All personnel immedi¬ 
ately evacuated to an underground tunnel per 
procedure. Later, radiation safety personnel entered a 
corridor located about 10 to 15 m from the room to 
measure the radiation level. Using a portable PMR- 
1 gamma sensing device it was determined that the 
radiation level exceeded the 18 R/h upper range of the 
instrument. Facility managers, the head of the site 
safety organization, and the site technical specialist 
arrived at the building about an hour after the criticality 
alarm sounded. 

Following their arrival, the facility managers and 
the technical specialist began interviewing personnel 
and reviewing measurements and working documents 
to locate the site of the accident. They concluded that 
the accident had occurred in the room with 
gloveboxes 9 and 10 and that the holding vessel was 
the most likely location of the accident. Remote 
readout of the criticality alarm detector located in the 
room indicated the average radiation level to be in the 
range of 1.5 to 1.8 R/h. The peak-to-minimum 
radiation level was oscillating in amplitude by more 
than a factor of 10. Using a long pole, personnel placed 
an integrating dosimeter into the room from the outside 
corridor during a radiation level minimum. Based on 


the exposure time, the gamma radiation level about 
2 m from the holding vessel was estimated to be 10 R/ 
h. The facility was not equipped with instrumentation 
that could have automatically recorded the excursion 
history. In addition, because of the high stress level, 
personnel did not take the time to manually record the 
excursion history. 

About an hour and a half following the first excur¬ 
sion, the vacuum system in the holding vessel was still 
switched on. Ordinarily the transfer of solution from 
R2 to the holding vessel would have been completed in 
much less than 1.5 hours. One speculated explanation 
for the continuing excursions was that the vacuum 
system would cause the transfer of enough solution to 
initiate an excursion, which would build up pressure 
sufficient to saturate the vacuum system momentarily 
interrupting the transfer. Eventually the vacuum system 
would recover, and more solution from R2 would be 
transferred leading to another excursion. To test this 
hypothesis the vacuum system was switched off. 
Despite this action, the excursions continued. 

The next attempt to terminate the excursions took 
place about 00:15 on 6 December. Three operators 
entered the room during a period of low radiation 
levels. They closed the holding vessel’s vacuum system 
and R2 transfer line valves. They then opened the 
holding vessel’s compressed air supply and the transfer 
valves to vessel R3. These tasks were accomplished in 
about 10 to 12 seconds. During this episode, the 
average radiation level in the room was about 1.8 R/h. 
A hand held PMR-1 instrument measured about 
14 R/h in the vicinity of the holding vessel. The 
vacuum system was then switched on and 5 i of 
solution were transferred from the holding vessel to 
vessel R3. This action terminated the excursions. The 
transfer was limited to 5 i to prevent a criticality 
accident from occurring in vessel R3. 
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During the next shift, radiation safety supervisors 
decided that the room could be reentered since the 
remote readout of the criticality alarm system detector 
measured a radiation level of less than 0.15 R/h. 
Working from special instructions, three operators 
entered the room. Consciously limiting their time in 
the room and using three 20 i bottles, they were able 
to remove the 5 i of solution in R3 and make two 
transfers of 6 and 8 i from the holding vessel. The 
three 20 £ bottles were placed in a specially desig¬ 
nated storage location with the contents eventually 
being returned to the recovery process. 

An investigation was carried out to reconstruct the 
events leading up to the accident. The investigation 
determined that the accident occurred because the mass 
limits per batch in vessel R0 had been exceeded. 

Table 5 presents the chronology leading up to the 
overloaded batch in vessel R0. 

Nitric waste solutions deposited in vessel R0 
typically had a plutonium concentration of a few grams 
per liter. Criticality safety for the entire operation 
relied entirely on the mass limit for vessel R0. This 
mass limit was 400 g of plutonium. As can be seen in 
Table 5, the mass limit was exceeded on 2 December 
when the third batch of waste solution arrived at R0. 
Following the fourth transfer of solution on 3 Decem¬ 
ber, vessel R0 contained a total of 682 g of plutonium. 
However, the shift production engineer deliberately 
changed the R0 vessel log to show only 400 g in the 
vessel. On 4 December the oxalate precipitate in 
vessel R0 was dissolved and transferred in the form of 
plutonium carbonate solution to an empty vessel, R2, 
in glovebox 10. The same shift production engineer 
then violated procedures again by transferring an 
additional 30 £ of carbonate solution to R2. This latter 
transfer contained 115 g of plutonium. Consequently 
vessel R2 contained a total of 798 g of plutonium in a 
little less than 50 £ of solution in the early evening of 
5 December. The plutonium in R2 was then 
precipitated with approximately 15 g of plutonium 
discharged with the supernatant. The precipitate was 
again dissolved, and the carbonate solution was 
transferred to the holding vessel, leading to the 
criticality accident. 


Following the accident, the vacuum system trap, the 
holding vessel, and vessels R2 and R3 were carefully 
flushed. The flushing of the holding vessel resulted in 
40 £ of discharge which contained 180 g of plutonium. 
The contents of the three 20 £ bottles which had 
collected the contents of the holding vessel and 
vessel R3 were analyzed. Table 6 presents the results 
of these analyses. 


Table 6. Analysis of Accident Solution Recovered 
from Holding Vessel and R3. 


Bottle 

Number 

Volume 

(O 

Plutonium 
Cone, (g/ £) 

Plutonium 

Mass (g) 

1 

5 

39.4 

197.0 

2 

6 

37.7 

226.0 

3 

8 

36.4 

291.0 

Total 

19 


714.0 


To reconstruct the volume and plutonium mass that 
were in the holding vessel at the time of the accident, 
the 714 g from Table 6 were combined with the 180 g 
from the holding vessel flush to obtain 894 g of 
plutonium in 19 £ of solution and precipitate. The 
flushing of vessel R3 resulted in 10 £ of flush contain¬ 
ing 43 g of plutonium recovered from non-dissolved 
precipitate. The total mass of plutonium recovered 
from all the vessels plus the three 20 £ bottles was 
1003 g, suggesting that 66 g was held up in vessel R2. 

During the accident and the subsequent cleanup 
phase, five individuals received doses in the range 
0.24 rem to about 2.0 rem. There was no contamination 
or damage to any of the equipment. Following the 
accident, the holding vessel was immediately replaced 
with a favorable geometry vessel. The total fission 
yield was estimated to be about 2.5 x 10 17 fissions. 


Table 5. Chronology of Batch Composition Leading to Overloading of Vessel R0 in Glovebox 9. 


Date 

Volume 

(■O 

Concentration 

(g Pu 1 £) 

Pu Transferred 

(g) 

Pu Discharged 

(g) 

Running total of 
Plutonium in R0 (g) 

1 Dec 

160 

1.67 

267 

51.0 

267 -51 = 216 

2 Dec 

80 

2.20 

176 

21.0 

216 + 176 -21 = 371 

2 Dec 

100 

3.28 

328 

39.0 

371 + 328 - 39 = 660 

3 Dec 

80 

0.58 

46 

24.0 

660 + 46 - 24 = 682 
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8. Idaho Chemical Processing Plant, 25 January 1961 14 ’ 15 ’ 1617 

Uranyl nitrate solution , U(90), in a vapor disengagement vessel; multiple excursions; insignificant exposures. 


This accident occurred in the main process building, 
CPP 601, in H-cell, where fission products were 
chemically separated from dissolved spent fuel. The 
uranium was then concentrated via evaporation. 
Operations were conducted 24 hours per day on three 
8-hour shifts. The accident happened at 09:50 after a 
routine shift change at 08:00. This was only the fifth 
day of operation following a shutdown that had lasted 
nearly a year. 

The accident took place in the upper disengagement 
head of the H-l 10 product evaporator. This was a 
vertical cylindrical vessel of about 600 mm diameter 
and more than a meter tall, which was above a 130 mm 
diameter favorable geometry section. In spite of an 
overflow line located just below the disengagement 
head to preclude significant amounts of solution from 
reaching it, concentrated uranyl nitrate solution, about 
200 g U(90)/^, was apparently rapidly ejected up into 
this unfavorable geometry section. 

There were several conjectured causes of the 
solution entering the disengagement head, which were 
discussed in the accident investigating committee’s 
reports . 14 ’ 15 The most probable cause was thought to 
have been a bubble of high pressure air (residuum from 
an earlier line unplugging operation) inadvertently 
forcing a large fraction of the available 40 £ of uranyl 
nitrate solution in the 130 mm pipe section up into the 
vapor disengagement cylinder. Neither the exact fissile 
volume (and thus uranium mass) nor the geometry at 
the time of the spike is known; they can only be 
conjectured and bounded. It was certain that the 
excursion occurred in the head and was reported to be 
of short duration, a few minutes or less. The total 
number of fissions was estimated to be 6 x 10 17 with 
an uncertainty of 25%. 

There was no instrument readout to give a direct 
indication of the excursion history. Recordings from 
remote detectors such as continuous air monitors were 


all that were available from which to infer the time 
evolution of the excursion. Inspection of these strip 
chart recordings along with knowledge of their 
locations led to inconclusive, and, in the case of one 
strip chart, unexplainable findings. A subsequent 
American Nuclear Society (ANS) paper 15 on a method 
for estimating the energy yield of criticality excursions 
shows an initial spike of 6 x 10 16 and a total yield of 
6 x 10 17 . The source of these values could not be 
determined. Experimental data from the CRAC 5 series 
of prompt critical excursions coupled with the knowl¬ 
edge of the bounds on the volume of liquid involved in 
this accident support the values in the ANS paper. One 
final source of guidance as to the likely first spike yield 
is a private communication from Dr. D. L. Hetrick in 
which he concludes that a value of 6 x 10 16 seems the 
most reasonable. 17 

Radiation alarms sounded throughout the process 
areas, apparently from the prompt gamma-rays 
associated with the fission spike. All employees 
evacuated promptly, and there were only minimal 
doses (<60 mrem) caused by airborne fission products 
after personnel left the building. A team of operating 
and health physics personnel reentered the building 
20 minutes after the excursion and shut down all 
process equipment. As radiation levels had quickly 
returned to normal and there was no indication of any 
contamination within the manned areas, management 
authorized the workers to return to the plant at 14:45. 
No equipment was damaged. 

Several items were noted in the reports of the 
accident investigation committees as contributing 
causes. These included (1) poor communications, 
particularly oral messages between operators as to the 
positions of valves; (2) unfamiliarity of personnel with 
the equipment after such a long shutdown; and (3) 
relatively poor operating condition of the equipment. 
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9. Siberian Chemical Combine, 14 July 1961 

Uranium hexafluoride, U(22.6), accumulation in a vacuum pump oil reservoir; two excursions; one significant 
exposure. 


This accident occurred at a gaseous diffusion 
uranium enrichment facility. The enrichment process 
was a continuous, 24 hour operation. The end product 
was uranium hexafluoride (UF 6 ) enriched to various 
levels depending on the final reactor fuel to be pro¬ 
duced. 

The initial UF 6 sublimation, introduction into the 
cascade, intermediate purification, and its final 
desublimation to the solid phase (in cylinders) was 
conducted in desublimation/sublimation stages (DSS). 
DSS-6 (Figure 14), occupied a large room (7.2 by 
18 m) and was an intermediate purification stage (the 
enrichment was 22.6% by weight at this point in the 
cascade). This stage was used to remove contaminants 
such as air and excess hydrogen fluoride (HF) from 
the UF 6 . This process was accomplished by 

1. continuously diverting a portion of the UF 6 cascade 
stream to DSS-6, 

2. desublimating the UF 6 at temperatures between 
-60 to -80°C in the 5 main cylinders and in the 3 
intermediate cylinders, 

3. condensing excess HF at a temperature of about 
-180°C in the 2 sedimentation vessels, 

4. drawing off the impurities, followed by 

5. sublimation and reintroduction of the UF 6 into the 
diffusion cascade. 


During normal operations, most of the UF 6 
desublimated in the main and intermediate cylinders. 
The HF, containing only trace amounts of UF 6 , passed 
on and collected in the 2 HF sedimentation vessels. 

The air and any other non-condensable impurities 
were collected downstream in a bank of 5 holding 
vessels, about 4,500 i in capacity each. The contents 
of these holding vessels were then transferred to the 
gas purification equipment by the action of a vacuum 
pump (Figure 15) that used oil as its working fluid. 
About once every 15 days, it was necessary to replace 
the oil because accumulation of UF 6 caused an 
increase in density (from 0.9 to -0.92, with a concen¬ 
tration of -20 gU//) reducing the pump’s efficiency. 
While clearly having some criticality safety signifi¬ 
cance, this replacement schedule was motivated 
primarily by operational considerations. 

Both the main and intermediate cylinders were 
cooled by liquid nitrogen flowing through a coil 
embedded in iron-shot filled jackets surrounding the 
cylinders. When there was an adequate supply of liquid 
nitrogen, its flow was actuated automatically by a 
signal from thermal transducers (resistance thermom¬ 
eters). However, when in short supply, liquid nitrogen 
was fed manually from portable dewars. The sublima¬ 
tion (heating) cycle was activated automatically by a 
pressure sensor in the UF 6 accumulation vessel. 
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Figure 14. Layout of DSS-6. 
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Figure 15. Vacuum pump diagram showing oil reservoir (Dimensions are in mm). 


On 1 July 1961, equipment breakdowns at the liquid 
nitrogen production facility decreased its output 
by 50%, greatly reducing the available supply to the 
enrichment facility. The following day, operating 
procedures were changed to require that the 5 main 
cylinders be charged with liquid nitrogen manually. 
Furthermore, and in violation of procedures, the 
cooling of the 3 intermediate cylinders was discontin¬ 
ued entirely. These events and actions resulted in a 
large increase in the rate and amount of UF 6 passing 
through the holding vessels and accumulating in the 
vacuum pump oil. 

On 10 July, a regulator air leak in the enrichment 
cascade resulted in the need to divert a greater than 
normal fraction of the UF 6 stream to DSS-6 for 
purification. On 14 July at 04:45, a high radiation 
alarm sounded in the room housing the main DSS-6 
equipment. Unknown to any one at the time, this 
activation of the alarm was the result of the first 
criticality excursion occurring in the vacuum pump oil 
reservoir. Per procedure, the operator ceased operations 
and summoned the radiation control officer in charge 
to determine the cause of the alarm. The radiation 
control officer determined that the average exposure 
rate in the room was -9 mR/h. Although the facility 
had a criticality alarm system with the detector trip 
points uniformly set to 7 mR/h, it did not activate as 
the result of this very small excursion. 


The radiation control officer surveyed all the 
equipment in the room but was unable to locate the 
source of radiation. The holding vessels and vacuum 
pump were not surveyed since they were in an adjoin¬ 
ing room and were not suspected of having any 
appreciable uranium holdup. The radiation control 
officer noted that the exposure rate was decreasing 
rapidly during his survey, falling to ~0.7 mR/h after 
only 10 to 15 minutes. He then authorized the resump¬ 
tion of operations. 

At 07:30, the operator turned on the vacuum pump 
from the central control panel to evacuate the holding 
vessels. As he approached the equipment (-0.5 m), to 
open a valve between the pump and holding vessels, 
the criticality alarm sounded. The operator reported 
seeing a flash of light at that instant. He did not open 
the valve, but did turn off the pump and immediately 
ran to a telephone (about 200 m away) to inform a 
supervisor of the accident. Alarms sounded simulta¬ 
neously in three adjacent buildings at distances from 
160 to 320 m from DSS-6. The radiation control 
officer arrived and noted that the gamma radiation 
exposure rate was about 0.7 mR/h at 100 m and 
increased steadily to about 36 mR/h adjacent to the 
building housing DSS-6. The operator was sent to the 
hospital. 
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The accident investigation determined that the 
excursions had occurred in the vacuum pump oil 
reservoir (Figure 16). The gamma exposure rate on 
contact was measured daily at the midpoint of the oil 
reservoir for five days using a PMR-1 instrument. 
Results of these measurements are shown in Table 7. A 
total of 42.95 t of oil were drained into 5 i bottles on 
18 and 19 July. Analysis of the oil using the lumines¬ 
cent method indicated a uranium concentration of 
173 g/ £ with an uncertainty of ±30% to 40% (the 
luminescent method involved introducing a liquid 
luminescing agent into the solution and estimating the 
concentration from the intensity of the emitted light). 
The uranium enrichment was uniformly 22.6% by 
weight. 

The time evolution of the excursions had several 
unusual features. The UF 6 had been accumulating at a 
normal rate until four days before the accident when a 
large increase occurred. There was no delay in the 
initiation of the chain reaction due to the very slow 


reactivity insertion rate and the relatively large neutron 
source (-1.3 x 10 4 n/s from a,n reactions). Conse¬ 
quently, the first excursion on 14 July (04:45) was very 
small and probably did not exceed 2 x 10 14 fissions. 
After this excursion terminated, the oil in the reservoir 
probably remained only slightly subcritical. It should 
be emphasized that the concentration, solution volume, 
and material configuration at the time of this burst are 
not well known. Furthermore, it is not known if the 
vacuum pump was operating during this first excur¬ 
sion. 

When the pump was turned on at 07:30, the oil in 
the pump’s cavities was forced out into the central pipe 
of the oil reservoir. This sudden injection of oil 
containing uranium led to the second and much larger 
excursion. The shutdown of this excursion was due to a 
combination of temperature rise and radiolytic gas 
generation, which caused ejection of the oil from this 
central pipe back into the pump’s cavities and the gas 
purification equipment. As with the first excursion, the 



Figure 16. Oil reservoir (Dimensions are in mm). 
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Table 7. Results of y-Radiation Exposure Rate Measurements at Oil Reservoir 

Date 

(1961) 

Time 

Elapsed Time from 
Second Excursion 
(min) 

Exposure 
Rate (R/h) 

Notes 

14 July 

12:00 

270 

36.0 



13:30 

360 

25.2 



15:25 

475 

14.4 



17:30 

600 

14.4 



20:10 

760 

11.2 



23:15 

945 

9.0 


15 July 

12:00 

1710 

3.6 


16 July 

10:00 

3030 

1.8 



15:00 

3330 

1.8 


17 July 

11:00 

4530 

1.1 



15:00 

4770 

1.1 


18 July 

07:00 

5730 

0.9 

Draining of oil reservoir begun 

19 July 

08:00 

7230 

0.3 

Draining of oil reservoir completed 


exact configuration, concentration, and amount of oil 
injected into the central pipe of the oil reservoir from 
the pump are not well known. The total number of 
fissions for both excursions was estimated by fission 
product analysis to be about 1.2 x 10 15 . 

From 1 July until the accident, the following 
procedural violations occurred: 

1. The temperature recording instruments of the main 
cylinders were turned off. 

2. The main cylinders were cooled by manually pour¬ 
ing the liquid nitrogen directly onto the iron shot 
and not through the coil as procedure required. This 
resulted in significant temperature gradients within 
the main cylinders and, as a consequence, to mis¬ 
leadingly low temperature readings because the 
thermometer was adjacent to the liquid nitrogen 
pour point. 

3. Cooling of the intermediate cylinders was no longer 
being performed. 

The dose to the operator was estimated to be about 
200 rad, and only mild radiation sickness symptoms 
followed. No one else received measurable doses, and 
there was no equipment damage nor contamination as 
a result of the accident. 
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10. Hanford Works, 7 April 1962 1819 20 2122 

Plutonium solution in a transfer vessel; multiple excursions; three significant exposures. 


This Recuplex system process plant accident 
involved: 1) cleaning up the floor of a solvent extrac¬ 
tion hood, 2) a product receiver tank that could 
overflow into the hood, 3) a temporary line running 
from the hood floor to a transfer tank (about 460 mm 
diameter, 69 £ volume), and 4) the apparent improper 
operation of valves. 

The final triggering mechanism cannot be deter¬ 
mined because the testimony of witnesses and opera¬ 
tors is not in full agreement with the technical findings 
of the investigating committee. Although other 
mechanisms cannot be ruled out, there is a plausible 
course of events. The receiver tank overflowed into the 
hood, leaving a solution containing about 45 g Pu/ £ on 
the floor and in a sump; the operator, contrary to 
orders, opened a valve that allowed the solution to be 
lifted to the transfer tank. The later addition of aqueous 
solution (10 to 30 £ at 0.118 g Pu I £) and additional 
moderation following mixing and/or de-aeration of the 
contents of the transfer tank led to the excursion. 

The total excursion yield in the transfer tank was 
8 x 10 17 fissions, with the initial spike estimated to be 
no more than 10 16 fissions. Following the spike, the 
tank was supercritical for 37.5 hours as the power 
steadily decreased. 

Activation of the building criticality alarm system 
resulted in prompt evacuation. At the time (a Saturday 
morning), 22 people were in the building, only 
3 received significant doses of radiation (110, 43, and 


19 rem). The accident itself caused no damage or 
contamination but did precipitate final shutdown of the 
plant. The Recuplex operation had been designed as a 
pilot plant and only later converted to production. The 
construction of a new plant had been authorized before 
the accident occurred. 

Response to the accident was unique. A small, 
remotely controlled, television equipped, robot was 
used to reconnoiter the building interior, fix precisely 
the point of the accident (through an attached, highly 
directional gamma probe), read meters, deposit 
instrumentation at specified locations, and operate 
valves on command. 

Clayton (1963) 19 suggested a shutdown mechanism 
for the accident. A central pipe that entered the bottom 
of the vessel in which the reaction occurred was found 
after the accident to contain dibutyl phosphate with a 
significant loading of plutonium. It is suggested that 
this started as a layer of tributyl phosphate in carbon 
tetrachloride on top of the aqueous plutonium solution. 
The heat and radiation from the fission reaction could 
have driven off the CC1 4 and converted most of the 
remaining organic to dibutyl phosphate. The denser 
dibutyl phosphate, having extracted plutonium, could 
have gone to the bottom of the vessel and into the pipe, 
where it would contribute little to the system reactivity. 
As is often the case after an accident, it is difficult to 
evaluate the validity of this suggestion, but it does 
appear to provide a consistent explanation. 
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11. Mayak Production Association, 7 September 1962 

Plutonium nitrate solution in a dissolution vessel; three excursions; insignificant exposures. 


The accident occurred in a building that housed 
operations associated with the conversion of plutonium 
feed material to metal. The metal was subsequently 
purified by a number of processes and then cast into 
ingots. In each of these steps, dry residues (typically 
sand, slag, and crucibles from chip briquetting and 
casting) that contained recoverable quantities of 
plutonium were generated. It was during the chemical 
dissolution of some of these residues in an unfavorable 
geometry vessel that the accident occurred. 

The residues were typically collected, canned, and 
stored pending chemical treatment to recover the 
plutonium. There being no practical means to assay 
individual cans in real time, fissile mass per can was 
estimated based on historical averages. This average 
was determined from records of the assay of the 
solution in which each batch of residues was dissolved. 
The historical average plutonium content of the 
residues was about 1 % by weight. The statistical 
fluctuation of this average was also based on these 
historical records. 

Most cans contained less than 50 g of plutonium in 
about 5,000 g of residue, but occasionally, as a result 
of operational deficiencies, the plutonium content was 
significantly in excess of 100 g. All cans, regardless of 
suspected plutonium content, were stored in the same 
glovebox awaiting recovery. The criticality mass limit 
took into account the statistical fluctuation of the fissile 
mass per dissolution batch; thus, the plutonium feed 
mass was calculated by multiplying the residue mass 
by 1%. 

The first step in the recovery process was to 
dissolve the slag and residues in nitric acid. Typically 
five cans of residue were combined as the feed for a 
dissolution batch; procedures limited the number of 
cans to six. The glovebox used for this had two 
identical dissolution vessels, shown in Figure 17. 

While not bearing on this accident, it is interesting to 
note that this glovebox was an early, conservative 
design; it was made of 8 mm thick steel and had 
50 mm of lead shielding. 

Each dissolution vessel was cylindrical, 450 mm in 
diameter and 620 mm in height and had a capacity of 
about 100 L Each was equipped with a stirrer and a 60 
mm thick heating jacket through which hot water was 
circulated. The vessels were open-topped with 
movable plates typically covering the openings. 
Reagents were added through lines and residues were 
added manually by pouring. Also, each vessel had a 
solution sampling device that was used to monitor the 
acidity (pH). During the course of a dissolution run it 
was important to maintain a specified acidity level; 
excess acidity was lowered by adding more residue. 


During the days just before the accident, research was 
being conducted on technology for producing metal 
ingots by reduction smelting briquettes made from metal 
shavings. After having been returned to service subse¬ 
quent to repairs, the first charge to dissolution vessel 2 
was a residue batch from these smelting operations. This 
charge was high concentration residue containing 318 g 
of plutonium. After the dissolution run, only 11 g of 
plutonium was discharged in the nitrate solution. This 
was a clear sign of a very incomplete dissolution that 
should have caused operating personnel to postpone 
charging the next batch into vessel 2. Nevertheless, the 
next batch, containing 352 g of plutonium, was loaded 
into the vessel. 

Because repairs were in progress on liquid transfer 
systems, only nitric acid was initially added to vessel 2. 
Water was added several hours later in violation of the 
procedure that specified that water be added first. The 
quantities of these two reagents that were added were 
also in violation of the procedure. After several hours of 
mixing, the solution was determined to be acidic. 

Further mixing finally resulted in a slightly alkaline pH 
measurement. After allowing for the settling of solids, 
the clear liquid was decanted and sent to a collection 
tank. 

Records are incomplete, but it is likely that during 
this long dissolution run that additional residue from 
casting operations was charged to vessel 2 to neutralize 
the solution. Two subsequent dissolution operations 
were then performed. After the first of these, the solution 
was still acidic. During the second, an aqueous ammonia 
reagent was added which did neutralize the solution. 
Heating and mixing were then stopped and the solution 
was allowed to settle. After about 3 hours, at 00:15 on 
7 September, the criticality alarm sounded, and person¬ 
nel promptly evacuated to the predetermined assembly 
location, an underground tunnel. 

Here it was determined (by the absence of blood 
sodium activation) that no one received a significant 
dose. The excursion may have fortuitously occurred 
while the operators were on a work break. A workforce 
shift change was scheduled for 01:00, but workers for 
the next shift were not allowed into the facility, and all 
workers from the prior shift remained on duty. All 
recovery actions involving the equipment and solution in 
this glovebox were performed remotely from the shift 
supervisor’s room, approximately 30 m distant, until the 
system was put into a safely subcritical state. 

Fifteen minutes after the first excursion, unsuccessful 
attempts were made to remotely open a line and drain 
vessel 2. Further attempts at remote recovery included 
heating and mixing of the solution, temporarily lowering 
the reactivity of the system. A short while later the 
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Figure 17. Layout of glovebox equipment. 


heater and stirrer were turned off again, leading to a 
second excursion at 01:10. This was apparently no 
larger than the first, as it did not trip detectors that had 
not tripped during the first excursion. 

After this second excursion the plant and building 
managers arrived at the accident site along with the 
manager of the safety organization and supporting 
physicists. They then directed further recovery opera¬ 
tions. Attempts to remotely drain vessel 2 by various 
means continued until a third and final excursion 
occurred at 01:55. Detectors which had not previously 
tripped (some as far away as 150 m) were activated, 
indicating that this third excursion was the largest. At 
this time the stirrer and heater were once again turned 
on (to keep the system subcritical) and left on until the 
solution could finally be transferred from vessel 2. 

The final draining of the vessel was a two-part 
process. First, about one-half of the solution in 
vessel 2 was transferred to an aqueous collection vessel 
and then from there partitioned into several bottles. 

This procedure was then repeated with the remaining 
solution in vessel 2. All the bottles were stored in an 
isolated room, and the contents were reprocessed only 
after the radiation levels decreased to acceptable levels. 

The trip level of the criticality alarm detectors was 
110 mR/h. They were spaced a maximum of 30 m 
apart but were commonly much closer. Fifteen minutes 
after the first excursion the exposure rate in the vicinity 
of the glovebox was about 2.2 R/h. Thirty minutes after 
the third excursion the exposure rate in the vicinity of 
the glovebox was about 1.8 R/h. 

Ultimately it was determined that there had been a 
total of 1,324 g of plutonium in the dissolution vessel 


at the time of the accident. This was about three times 
the criticality safety limit. The recovered nitric solution 
contained 933 g of plutonium and a very rich precipi¬ 
tate was found in the bottom of vessel 2. It contained 
391 g of plutonium in 660 g of solids; the remainder 
was mostly graphite pulp from molds. Using approxi¬ 
mate techniques, the energy release for all three 
excursions was estimated at 2 x 10 17 fissions. The 
excursion history was not recorded. There was minor 
ejection of solution from the vessel onto the glovebox 
floor, likely from the third excursion. 

Several factors contributed to the accident: 

• Unfavorable geometry equipment. 

• The charging of high grade residues into the disso¬ 
lution vessel when the criticality controls were 
based on residues with an average 1 % plutonium 
content. 

• Inadequate isolation of high grade residues from the 
more common low grade residues in the staging 
glovebox. 

• Unclear and difficult to read labels on the residue 
cans. 

• Procedural violations on the sequence of reagent 
additions. 

• Inadequate supervisory monitoring of operations; 
inadequate attention to the completion of accoun¬ 
tancy documents. 

• Lack of real time fissile material accounting instru¬ 
mentation. 

No equipment damage occurred and only a short 
downtime was needed to clean up the spilled solution. 
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12. Siberian Chemical Combine, 30 January 1963 

Uranyl nitrate solution , U(90), in a collection vessel; multiple excursions; insignificant exposures. 


This accident occurred in a waste recovery line of a 
uranium metal production building. The waste feed 
was a dry precipitate. The first step in recovering the 
uranium was a time-intensive, concentrated nitric acid 
dissolution process. Two sets of identical equipment 
were used to increase the throughput and to optimize 
the process. Figure 18 is a material flow diagram for 
this process. 

The solution was vacuum transferred from the 
dissolution vessels to the intermediate feed vessels, 
through a filter vessel, and then finally to the collection 
vessels. The dissolution and intermediate vessels were 
320 mm in diameter and 520 mm in height. The 
collection vessels were 390 mm in diameter and 
500 mm in height. All of the vessels had curved ends 
and were about 50 i in volume. Since the process 
vessels were not favorable geometry, limiting the 
fissile material mass was the only control used to 
prevent criticality accidents. Compliance with the mass 
limit was solely dependent on the reliability of the 
chemical analysis of the dry precipitate. 

Despite the importance of chemical analysis results 
for implementing the criticality safety mass control, 
there were two allowed reporting formats: 


Collection 



Figure 18. Process vessels and material flow diagram. 


1. as grams of uranium per kilogram of precipitate, 

g U(90)/kg, or 

2. as a mass fraction, the uranium-to-precipitate mass 

ratio. 

The bulk amount of precipitate to be processed was 
calculated using the results of the chemical analysis. 
The precipitate was then weighed before loading into 
the dissolution vessels. 

When dissolving consecutive batches of precipitate, 
the operational procedure allowed for the recycling of 
solution with low uranium concentration from the 
collection vessels, as long as the total mass of uranium 
in the dissolution vessels did not exceed 400 g. The 
uranium concentration in the recycled solution was 
determined by analyzing samples from the collection 
vessels. This concentration was always reported as 
grams of uranium per liter (gU/l) and was also used 
for compliance with the criticality safety mass limit. 

On 30 January 1963, two waste containers were 
received at the waste recovery line with the chemical 
analysis results attached. These results were reported 
as a mass fraction, approximately 0.18 in this case. The 
supervisor for the shift erroneously recorded this result 
in the work orders as 18 g U/kg of dry precipitate 
(instead of 180). The actual uranium content in this 
batch of dry precipitate was thus in error and underesti¬ 
mated by a factor of 10. 

Using the erroneous work orders, an operator 
loaded 2 kg of precipitate from one container and 5 kg 
from another into dissolution vessel 61-A, believing 
the total uranium content to be 126 g when it was 
actually about 1,260 g. Because of a shift change, a 
different operator completed the dissolution process. 
The solution was then filtered and transferred to 
collection vessel 64-A, where a sample was taken to 
determine the concentration. Later during that same 
shift, the operator asked for the sample results by 
telephone. While this normally would have led to the 
discovery of the original recording error, the laboratory 
erroneously reported the results for a vessel other than 
64-A. By an unfortunate coincidence, this other vessel 
contained solution with a uranium concentration 
10 times lower than that in 64-A, thus reinforcing the 
operator’s expectations. 

The supervisor for the second shift, relying on this 
erroneous information, decided to recycle this suppos¬ 
edly low concentration solution to dissolve the next 
batch of dry precipitate. This next batch, still subject to 
the original recording error, contained -1,255 g of 
uranium, about the same as that of the preceding batch. 
The dry precipitate was loaded into dissolution 
vessel 61-A and then the solution from collection 
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vessel 64-A was added. The dissolution vessel thus had 
over 2,500 g of uranium, an amount close to the 
unreflected critical mass for this diameter vessel. The 
solution was then filtered in 10 i batches and trans¬ 
ferred to the larger diameter collection vessel 64-B. In 
the course of this filtering/transfer operation, the 
solution exceeded the critical height in 64-B, and the 
first excursion occurred at 18:10 on 30 January 1963. 
The criticality alarm system sounded and all personnel 
evacuated. The y-ray detectors were set to activate at 
110 mR/h. Several of the personnel were directed to 
undergo medical assessment. 

During approximately the next 10 hours, eight 
additional excursions occurred, decreasing in power 
each time. The total number of fissions was estimated 
to be 7.9 x 10 17 . This was based on a sample analysis 
that determined the total 140 La fission product content 
after the accident. The shutdown mechanisms for the 
excursions were 

• expansion caused by the formation of radiolytic gas 
bubbles, 

• ejection of some of the solution into the service 
piping, 


• thermal expansion of the solution (decreased den¬ 
sity), and 

• an increase in the solution temperature, which 
tended to harden the neutron spectrum. 

Each time the solution drained back into the vessel 
from the service pipes and cooled down another 
excursion took place. The excursions were terminated 
on 31 January 1963 at 04:30, when part of the solution 
was drained from the collection vessel to portable 5 i 
containers. 

The accident investigation determined that a total of 
2,520 g of uranium in a volume of about 35.5 t 
(~71 g/ 1 ) was in the collection vessel at the time of the 
accident. All of the solution (35.5 £) was stored in a 
concrete shielded room for one year, then reprocessed. 

Four people standing at a distance of 10 m from the 
collection vessel received radiation doses of 6 to 
17 rad. No damage occurred to the vessel nor was there 
any contamination of the surroundings. The process 
was inoperative for no more than 12 hours. 


13. Siberian Chemical Combine, 2 December 1963 

Uranium organic solution, U(90), in a vacuum system holding vessel; multiple excursions; insignificant 
exposures. 


This accident occurred in an enriched uranium, 
U(90), reprocessing and purification facility. Opera¬ 
tions were being conducted on four 6-hour shifts per 
day. The combination of an unfavorable geometry 
holding vessel and the unplanned accumulation of 
much larger than expected quantities of organic 
solutions led to the accident. 

The normal use of the vacuum system routinely 
resulted in the accumulation of small amounts of 
solution within the vacuum system as drops and 
condensate. In addition, occasional operator mistakes 
resulted in the overflow of process vessels, again 
resulting in solution entering the vacuum system. In 
order to protect the vacuum system from the corrosive 
effects of this solution, and to prevent loss of solution 
from the process stream, two traps and a holding vessel 
were installed in the vacuum line. The traps, 696 and 
697 in Figure 19, were intended for the collection of 
solutions that entered the vacuum lines. Holding vessel 
694 served as a backup in the event that either of the 
two traps filled to preset levels. This would result in the 
automatic draining of some of their solution. All three 
vessels had straight cylindrical sidewalls of 500 mm 
diameter with hemispherical bottoms and a volume of 
about 100 t. The vessels were spaced about 1.5 
meters, surface-to-surface. 


Each vessel had a level indicator that was actuated 
when an electrically conductive solution reached a 
preset height. For traps 696 and 697, the preset height 
was only half as high as for vessel 694. When the level 
indicator in either 696 or 697 was actuated, the transfer 
of solution occurred automatically until the level was 
drawn down (decanted) to the bottom of the dip tube. 
However, when the level indicator in holding vessel 
694 was actuated, its entire contents were drained via 
the outlet line. 

When these vessels were installed, it was believed 
that only high conductivity aqueous solutions would 
accumulate in them. However, because organics such 
as tributylphosphate were transferred in this facility 
using this same vacuum system, considerable amounts 
of organic solution were in fact also ending up in these 
vessels. The very low electrical conductivity of these 
organic solutions was insufficient to actuate the level 
indicators. 

During typical operations, sufficient quantities of 
aqueous solutions would accumulate in vessels 696 
and 697, causing the automatic decanting to occur up 
to four times per day. The elevation difference between 
the level indicator and the dip tube was slight, thus 
causing only 1 or 2 i to be transferred at a time. 
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Vacuum Collector 



Outlet Line 


Figure 19. Schematic of vessels showing organic and aqueous solutions (not intended to imply the exact conditions 
at the time of the accident). 


Because the organic solution was much less dense than 
the aqueous solution, the liquids separated into 
different layers within the vessels. Since the organic 
solution did not actuate the level indicators, it could 
continue to accumulate until the level of aqueous 
solution was sufficient to trigger a transfer. In addi¬ 
tion, as aqueous solution entered the vessels it would 
temporarily mix with the organic solution. This caused 
a portion of the fissile material in the aqueous solution 
to be extracted into the organic layer, thus increasing 
its fissile material concentration. 

These same chemical and physical processes were 
also occurring in holding vessel 694. However, because 
its level indicator was set twice as high, more liquid, 
and thus a greater amount of high concentration 
organic, could accumulate undetected. Prior to the 
accident, holding vessel 694, in which the excursion 
occurred, had not been emptied for 8 days. Further¬ 
more, and unknown to operating personnel, the vessel 
was mostly filled with high concentration organic. 

On 2 December 1963 at 23:45, detector 38 tripped, 
causing the criticality alarm to sound. This detector 
was in a corridor close to the location of the traps and 
holding vessel. Operating personnel did not routinely 
work in this corridor, nor were they present when the 
alarm sounded. Nevertheless, personnel were evacu¬ 
ated from all building locations near detector 38. The 
detectors were gamma sensing, with the trip level set at 
110 mR/h. Very quickly, detector 38’s reading in¬ 


creased a hundred fold to 11 R/h. Based on subsequent 
radiation surveys, it was determined that the excursion 
had occurred in holding vessel 694. 

During the first -195 minutes, 11 excursions in total 
were observed. These were very long, weak excursions 
with a time between power peaks of about 20 minutes. 
At 03:45 the following morning, on 3 December, the 
vacuum system was de-energized by plant personnel. 
This caused some of the highly concentrated organic 
that had been ejected into the vacuum system during 
the excursions to the drain back into vessel 694. This 
caused a second series of weaker excursions. The first 
power peak was similar in magnitude to the first peak 
of the prior series. This second series lasted until about 
08:00 (more than 4 hours). Four excursions, each of 
decreasing intensity, were observed. 

By 15:00 that afternoon, the exposure rates had 
decreased considerably, at which time 30 l of 10% 
cadmium nitrate solution were added to the holding 
vessel from the top. It was thought that this would be a 
significant neutron absorber since it was expected that 
the vessel contained mainly aqueous liquid and 
intimate mixing would occur naturally. However, the 
cadmium nitrate solution did not mix with the organic 
and served only to displace it from the hemispherical 
bottom of the vessel. Holding vessel 694 had now 
become slightly subcritical as a result of higher 
neutron leakage from the organic solution. The 
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additional reflection afforded by the added poisoned 
aqueous solution was apparently insufficient to 
compensate for this effect. 

After addition of the cadmium nitrate solution, a 
hose was inserted into the holding vessel through a top 
port to siphon out the solution. Surprisingly, at the very 
beginning of the siphoning, a sixteenth, and final, 
excursion occurred. Later, upon consideration of the 
facts, it was recognized that this last excursion was a 
result of siphoning from the bottom of the vessel. Even 
though the draining of the cadmium nitrate decreased 
reflection, it allowed the organic to assume a more 
reactive geometry as it reentered the hemispherical 
bottom of the vessel. 

The siphoning action was continued (in spite of the 
last excursion) until the vessel was drained. Altogether 
about 65 £ of organic with a uranium concentration of 
33 g U(90 )l£, corresponding to about 2.14 kg of 
U(90), were removed from holding vessel 694. 


During the nearly 16 hours over which the accident 
took place, the plant operators and supervisors on shift 
at the beginning of the excursions remained at the 
facility to assist with recovery operations and to 
document the events. 

The total number of fissions, based on 140 La fission 
product analysis, was estimated to be about 6 x 10 16 . A 
prompt and efficient evacuation was initiated by the 
sounding of the criticality alarm system. The largest 
individual dose received was less than five rem. There 
was no damage to the equipment or radioactive 
contamination. 

The accident occurred (despite the fact that the 
vessels were steam cleaned monthly) presumably 
because of a rather quick and large accumulation of 
both organic and aqueous solutions. Subsequently, 
changes were made to the process design and between 
January and September 1964, large numbers of process 
vessels were replaced. At the end of this renovation, 
nearly all of the vessels were of favorable geometry. 


14. United Nuclear Fuels Recovery Plant, 24 July 1964 2324 

Uranyl nitrate solution , U(93), in a carbonate reagent makeup vessel; two excursions; one fatality, two significant 
exposures. 


This accident occurred in a chemical processing 
plant at Wood River Junction, Rhode Island, which was 
designed to recover highly enriched uranium from 
scrap material left over from the production of fuel 
elements. The plant operated three, 8-hour shifts, 5 
days a week. The scrap material was shipped to the 
plant as uranyl nitrate solution in 55 gallon (208 £) 
drums, at concentrations ranging from 1 to 5 g/£ of 
uranium. The uranyl nitrate was then purified and 
concentrated by solvent extraction using tributyl 
phosphate mixed with kerosene as the organic wash. 
After the final acid strip, the purified uranyl nitrate 
solution was bubbled through a column containing a 
fixed charge of 4 to 6 £ of trichloroethane (TCE). The 
TCE removed any organic that remained in the 
solution. The original plant design was based on a 
predicted life of 6 months to 1 year for a single charge 
of the TCE. 

Typical of the difficulties that should be expected 
with a new operation (the plant had begun operations 
on 16 March 1964) a larger amount of organic 
carryover and a higher retention of uranium reduced 
the TCE’s useful life to approximately 1 week. In early 
April, therefore, a procedure was developed to remove 
the uranium from the TCE before discarding it. The 
very low concentration of uranium in the solution 
(400 to 800 ppm) was recovered by washing the TCE 
with sodium carbonate solution. Originally, the 


operation was performed by manually shaking or 
rocking the solution within 5 inch (127 mm) diameter, 
11 £ bottles. This somewhat laborious process was 
used until 16 July. On that date, because an unusually 
large amount of contaminated TCE had accumulated, 
an operator was given permission by his supervisor to 
use a sodium carbonate makeup vessel to perform this 
process as long as the uranium content did not exceed 
800 ppm. The vessel was 18 inches (457 mm) in 
diameter and 26.375 inches (670 mm) deep and was 
located on the third level of a tower housing solvent 
extraction columns. This new procedure was communi¬ 
cated to one other operator on a different shift. 

Between 16 and 24 July, these two operators washed 
10 to 12 bottles each using the carbonate makeup 
vessel. It should be noted that the treatment of the TCE 
by any method was not part of the facility license, and 
therefore was not approved by the regulating authority. 

On the day before the accident, a plant evaporator 
had failed to operate properly, making it necessary to 
disassemble it for cleaning. During the cleaning, a plug 
of uranium nitrate crystals was found in a connecting 
line. The crystals were dissolved with steam, and the 
resulting concentrated solution (256 g U /£) was 
drained into polyethylene bottles identical to those that 
normally held the very low concentration TCE 
solution. All of the bottles containing the high concen¬ 
tration solution were labeled as such. 
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On Friday, 24 July, at approximately 18:00 the 
operator assigned to work the solvent extraction 
columns asked his supervisor if it was necessary to 
wash some of the contaminated TCE. Since the 
contaminated TCE was to be used for rinsing a process 
column, he was told that washing the TCE was not 
necessary. Nevertheless, the operator proceeded to 
locate a bottle of TCE with the intention of washing it, 
perhaps only to obtain an empty bottle. Unfortunately, 
the operator mistook one of the bottles containing the 
high concentration solution for one containing TCE. 
The bottle was transported to the stairwell leading to 
the third floor location of the carbonate makeup vessel 
by cart, and then hand carried the rest of the way. The 
bottle’s label, which correctly characterized the 
contents as high concentration solution, was found 
after the accident on the floor near the cart. 

After arriving at the third floor, the operator poured 
the contents of the bottle into the makeup vessel 
already containing 41 i of sodium carbonate solution 
that was being agitated by a stirrer. The critical state 
was reached when nearly all of the uranium had been 
transferred. The excursion (1.0 to 1.1 x 10 17 fissions) 
created a flash of light, splashed about 20% of the 
solution out of the vessel and onto the ceiling, walls 
and operator. The operator who fell to the floor, 
regained his footing and ran from the area to an 
emergency building -180 m away. 

An hour and a half after the excursion, the plant 
superintendent and shift supervisor entered the 
building with the intent of draining the vessel. When 
they reached the third floor, the plant superintendent 
entered the room and approached the carbonate reagent 
vessel while the supervisor remained behind in the 
doorway. The superintendent removed the 11 £ bottle 
(still end up in the vessel) and turned off the stirrer. He 
then exited the room, passing the supervisor and 
preceding him down the stairs. Unknown to anyone at 
the time (the alarm was still sounding from the first 
excursion), the change in geometry, created as the 
stirrer induced vortex relaxed, apparently added 
enough reactivity to create a second excursion, or 
possibly a series of small excursions. The estimated 
yield of the second excursion was 2 to 3 x 10 16 fissions 
and no additional solution was ejected from the vessel. 
The two men proceeded down to the second and first 


floors and began to drain the tank through remote 
valves. When the drain line became clogged with 
precipitate, the superintendent returned to the vessel, 
restarted the stirrer, and then rejoined the supervisor 
who was draining the solution into -4 £ bottles on the 
first floor. 

That the second excursion had occurred was not 
realized until dose estimates for the superintendent and 
supervisor were available. The supervisor received 
-100 rad, while the superintendent received -60 rad. 
Both doses were much higher than expected and were 
inconsistent with their reported actions. Only after 
significant analysis was it realized that the two had 
been exposed to a second excursion, which most likely 
occurred just as the superintendent passed the supervi¬ 
sor on the way down the stairs. 

The radiation dose to the operator as a result of the 
initial excursion was estimated to be about 10,000 rad. 
He died 49 hours later. Other persons in the plant 
received very minor doses. The investigation deter¬ 
mined that there had been 2,820 g of uranium in 51 £ 
of solution in the makeup vessel at the time of the first 
excursion. No physical damage was done to the 
system, although cleanup of the ejected solution was 
necessary. The total energy release was equivalent to 
1.30 ± 0.25 x 10 17 fissions. 
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15. Electrostal Machine Building Plant, 3 November 1965 

Uranium oxide slurry, U(6.5), in a vacuum system vessel; single excursion; insignificant exposures . 


This accident occurred in Building 242 that housed 
a production scale operation for the conversion of 
uranium hexafluoride to uranium oxide. The plant 
operated on four 6-hour shifts per day. Between 
23 September 1964 and 19 October 1965, the facility 
had been converting 2% enriched material. However, 
because of the need to provide fuel for two newly 
commissioned uranium-graphite power reactors at the 
Beloyarskaya Nuclear Power Plant, it was necessary to 
begin processing 6.5% enrichment material. To 
perform this change over, the process was shutdown on 

19 October 1965. During the following three days, the 
entire system was thoroughly cleaned out. The 
conversion process was restarted with the higher 
enriched material on 22 October 1965. The criticality 
accident occurred 12 days later. 

Figure 20 is a layout of the Building 242 uranium 
hexafluoride to uranium oxide conversion system and 
associated vacuum system. The uranium hexafluoride 
was burned in a hydrogen-air atmosphere in the 
conversion hopper. The resulting uranium oxides were 
collected at the bottom of the conversion hopper and 
then transferred by vacuum to the accumulation 
hopper. The vacuum system was then switched off and 
the oxides were loaded into geometrically favorable 

20 i vessels by gravity. The vessels were then trans¬ 
ferred from Building 242 to another location where the 
oxides underwent defluorination and complete 
reduction to U0 2 in a rotating calcination furnace. 

The vacuum system was located one floor level 
below the conversion system. To prevent oxide from 
entering the vacuum system, two filters were located in 
the vacuum line connecting the accumulation hopper to 
the (liquid ring) vacuum pump. Both the primary and 
the secondary filters used Lavsan, a fluorinated plastic 
material woven into a cloth-like fabric. Written 
procedures required that personnel on each shift open 
and visually inspect the secondary filter. This inspec¬ 
tion was performed to ascertain the level of oxide 
accumulation and to look for mechanical defects in the 
Lavsan itself. If the operator was unable to see through 
the Lavsan of the secondary filter, in addition to 
replacing it, he was also required to open and visually 
inspect the primary filter. Procedures also required 
personnel on each shift to have a sample of the vacuum 
system water analyzed for uranium content. Sample 
assay results were usually available about 1.5 hours 
after the sample was taken. There was no nondestruc¬ 
tive assay equipment in place or routinely used to 
determine if uranium oxide was accumulating in the 
vacuum system. 


The components of the vacuum system were a 
vacuum pump, a water pump, a vacuum supply vessel 
(where the accident occurred), and a shell-and-tube 
heat exchanger. The vacuum supply vessel was a 
vertical axis, right circular cylinder, with a diameter of 
650 mm and a height of 900 mm (-300 £). The vessel 
was equipped with a water level glass site gauge. 

On 3 November 1965 at 11:10, the criticality 
accident alarm system sounded in Building 242. All 
personnel in Building 242 immediately evacuated. The 
alarm systems of the adjacent buildings did not 
activate. The facility’s chief physicist made the first re¬ 
entry into Building 242 about 50 minutes after the 
building had been evacuated. Using a portable gamma- 
ray detector, he quickly determined that an accident 
had occurred in the vacuum supply vessel. At this time 
he recorded a gamma exposure rate of 3.6 R/h at a 
distance of 1.5 m from the surface of the vessel. 

Recovery operations, performed by operations 
personnel under the direction of a health physicist, 
were conducted in a manner that minimized the 
likelihood of causing additional excursions. A long rod 



Figure 20. Layout of UF 6 to uranium oxide conversion 
equipment and associated vacuum system. 
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was used to break the glass site gauge on the side of 
the vessel. Geometrically favorable collection trays 
were positioned so as to collect the draining liquid. The 
draining operation resulted in the collection of about 
60 i of liquid. Analysis showed that the liquid 
contained 85 g of uranium per liter or a total of 5.1 kg 
of uranium. Eight days after the accident (11 Novem¬ 
ber 1965), the vacuum supply vessel was opened and 
an additional 51 kg of uranium was recovered. The 
total material recovered from the vacuum supply vessel 
was 56.1 kg of uranium or, at 6.5% enrichment, about 
3.65 kg of 235 U. An additional 13.9 kg of uranium was 
recovered from the shell-and-tube heat exchanger and 
connecting lines. The total material recovered was 
70 kg of uranium or about 4.6 kg of 235 U. 

An investigation was performed to discover the 
cause of the accident. The investigation team examined 
the records and confirmed that the Lavsan of the 
primary and secondary filters had been replaced during 
the three days that the system was being cleaned 
(19 through 22 October 1965). In addition, 150 i of 
water had been drained from the vacuum system and 
replaced with fresh water. During the same period, 
plans were made to install a third filter between the 
accumulation hopper and the vacuum pump due to 
increased criticality safety concerns with the higher 
enrichment material. However, operations personnel 
were unable to install the additional filter before the 
restart of production on 22 October 1965. 

The investigation determined that operational 
mistakes and procedural violations occurred following 
the restart of production. At the time of the accident, 
the primary filter was missing. In addition, the second¬ 
ary filter was not completely secured by the flanges 
intended to hold it in place. The investigation was not 
able to determine how long the primary filter had been 
missing or how long the secondary filter had been 
leaking. These two operational mistakes allowed 
uranium oxide from the accumulation hopper to enter 
the vacuum system. Furthermore, and in violation of 


procedures, the vacuum system water had not been 
sampled even a single time since the restart of 
operations. 

Two types of analysis were performed to estimate 
the total energy released by the accident. The first was 
based on the 3.6 R/h exposure rate measurement made 
1.5 m from the vacuum supply vessel about 50 minutes 
following the accident. Analysis of this information 
provided an estimate of 5 x 10 15 total fissions. The 
second estimate was based on a 64 Cu activation 
analysis of a section of copper wire located about 
1.2 m from the vacuum supply vessel. This resulted in 
an estimate of 1 x 10 16 fissions. Both estimates had 
considerable experimental and computational uncer¬ 
tainties. 

Reconstruction of the accident conditions indicated 
that the onset of the excursion occurred during a slow 
settling of oxides to the bottom of the vacuum supply 
vessel. This occurred after the vacuum system was 
turned off. Initiation was most likely not delayed due 
to the slow reactivity insertion rate and an inherent 
neutron source of about 800 neutrons/s that was 
present in the vacuum supply vessel. The mechanism 
that terminated the excursion is unknown but could 
include continued settling of the oxides or expulsion of 
material into connecting lines. The equipment was not 
damaged and there was no contamination. A calcula¬ 
tion indicated that one person who was about 4.5 m 
from the vacuum supply vessel could have received a 
dose as high as 3.4 rem. 
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16. Mayak Production Association, 16 December 1965 

Uranyl nitrate solution , U(90), in a dissolution vessel; multiple excursions; insignificant exposures. 


This accident occurred in a residue recovery area of 
a metal and fissile solution processing building. The 
residues being recovered were produced from dissolu¬ 
tion, precipitation, and reduction processes. A sche¬ 
matic of the residue recovery area is shown in Fig¬ 
ure 21. The residues, which were difficult to dissolve, 
were first calcined to convert the uranium content, 
usually less than 1% by weight, to U 3 0 8 . Residues 
with abnormally high uranium content, which were 
occasionally generated (failed castings, cracked 
crucibles, etc.), were directed by operating procedures 
to other handling areas subject to special requirements. 

The residue dissolution glovebox where the 
accident occurred had three identical sets of process 
equipment as shown in Figure 22. Each set was 
equipped with a cylindrical dissolution vessel, a 
holding vessel, a filter vessel, and a filtrate receiving 
vessel. The dissolution vessels had elliptical bottoms, 
were 100 t in volume, and 450 mm in diameter, and 
were equipped with a pulsating device for mixing, a 
flat cover plate with a feed hopper, and a pressure 
relief valve. Heating of the dissolution vessels was 
accomplished with a 25 mm thick, steam-water jacket. 
Solution was moved within the system through a 
transfer line by drawing vacuum. 


The residues were loaded into the dissolution vessel 
via the feed hopper located on the cover plate. The feed 
hopper was equipped with a lid that was sealed and 
locked in place during dissolution. Dissolution was 
accomplished by adding acid and heating the solution 
while mixing with the pulsating mixing device. Once 
dissolution was complete, the resulting solution was 
vacuum transferred to the holding vessel. The solution 
was then passed through the filter vessel (to remove 
non-dissolved solids) to the filtrate receiving vessel. 

The day before the accident, 15 December 1965, a 
shift supervisor instructed an operator to calcine 
residue batch 1726 (uranium content greater than 1%) 
in a glovebox with furnaces intended only for the 
processing of residues with less than 1% uranium 
content. This was a direct violation of the criticality 
safety rules. After calcination, batch 1726 was 
sampled, and before the results of the analysis had 
been obtained, was transferred to another glovebox 
already storing multiple batches of residue scheduled 
for dissolution. The analytical laboratory determined 
the uranium content of the sample from batch 1726 to 
be 44% by weight. This result was recorded in the 
laboratory sample book but was not transmitted to the 
recovery wing for recording on the batch’s account¬ 
ability card. 
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Figure 22. Layout of dissolution glovebox. 


Subsequently, an operator preparing the waste 
batches for dissolution, noticed that the analysis results 
for batch 1726 were absent and contacted the labora¬ 
tory by telephone to obtain them. As a result of poor 
communications, the operator was mistakenly given 
the assay results for batch 1826, a batch that was only 
0.32% by weight uranium, —138 times smaller than 
that actually contained in batch 1726. The operator 
recorded this result on the accountability card and on 
the label of the batch 1726 container. 

The next day (16 December) 5 kg from batch 1726, 
containing about 2.2 kg of U(90), were loaded into 
dissolution vessel #1. The criticality mass limit for this 
vessel was 0.3 kg. The operator, therefore, unknow¬ 
ingly exceeded this limit by more than a factor of 7. At 
that same time, dissolution of low uranium content 
residue was already underway in the two other 
dissolution vessels. 

According to procedure, the dissolution of the waste 
was to be carried out at 100°C for a minimum of 1.5 
hours with constant mixing. However, in this case the 
process was discontinued after only 40 minutes to 
accommodate the regularly scheduled cleaning of the 
glovebox before the next shift. 


Approximately 10 minutes after the heating and the 
mixing devices were turned off, the operator, who was 
cleaning the glovebox at the time, heard the nearest 
criticality alarm sound for a short time. The operator 
left the operations area (as per training for the sound¬ 
ing of a single alarm) and went to the central control 
room to determine the cause of the alarm. When the 
operator reached the control room, the nearest alarm to 
the glovebox again sounded. A few seconds thereafter, 
at —22:10, alarms associated with more distant detec¬ 
tors also began to sound. Eventually, several dozen 
alarms sounded. As instructed by their emergency 
training, all personnel evacuated to an underground 
tunnel. The time-delayed activation of the individual 
alarms, spaced at different distances from the accident 
location, indicated that the peak reactivity did not 
reach prompt critical. 

Before the emergency response personnel arrived at 
-23:00, the dynamics of the system were monitored 
from another building (-50 m distant) using remote 
readouts from gamma-ray and neutron sensing 
instruments. Four additional excursions, separated by 
about 15 to 20 minutes each, were observed. After the 
emergency response personnel arrived, it was judged, 
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based on a radiation survey, that the central control 
room (Figure 21) could be safely occupied by person¬ 
nel even during the excursions. Consequently, surveil¬ 
lance and recovery management operations were 
moved to this location. 

Based on interviews with operating personnel, 
examination of the accountability records and system 
schematics, and the results of y-ray surveys conducted 
with portable collimated detectors, dissolution vessel 1 
or its associated holding vessel was identified as the 
most likely location of the accident. The surveys 
indicated that the average exposure rate, 1.5 minutes 
after an excursion, was -8 R/h at a distance of 2 m 
from the dissolution glovebox. 

After the ninth excursion, cadmium poisoned 
solution was remotely added to the holding vessel. 
Despite this action, approximately 20 minutes later a 
tenth excursion occurred, establishing dissolution 
vessel 1 as the site of the accident with a high degree 
of probability. The removal of the vessel’s contents or 
addition of cadmium poisoned solution were consid¬ 
ered to be too dangerous to personnel because either 
action would have required time intensive manual 
manipulation of valves located within the glovebox. 
Instead the emergency response personnel decided to 

• remove two gloves from the glovebox ports to gain 
access, 

• unlock and open the feed hopper lid, and 

• insert a ball consisting of crumpled up strips of 
0.5 mm thick cadmium foil into the vessel through 
the feed hopper. 

The first two tasks were successfully accomplished 
by two, specially briefed, experienced operators taking 
no more than 30 and 60 seconds, respectively, includ¬ 
ing the time necessary to enter and exit the operations 
area. The recovery actions were then halted as the 
radiation level began to rise again indicating that an 


eleventh excursion was under way. After waiting for a 
significant decrease in the radiation level, a senior 
engineer/physicist entered the operations area and 
loaded the cadmium foil ball into the vessel, taking 
care to disturb the surface of the solution as little as 
possible so as not to initiate another excursion. This 
took about 20 seconds total. As evidenced by the 
release of a characteristic orange smoke, the cadmium 
foil began dissolving immediately in the nitric acid. 

The introduction of the foil terminated the excursions 
as shown by a steady decrease in the y-ray exposure 
rate measurements. All three of the individuals 
involved in the recovery actions carried personal 
dosimeters. No one received doses greater than 
0.3 rem. 

One day after the termination of the accident, the 
solution was transferred from the dissolution vessel, 
using temporary piping, to favorable geometry 
containers. These containers were then sent to a special 
storage facility and later reprocessed by conventional 
techniques after the cadmium had been removed. 

The total number of fissions for the 11 excursions 
was estimated from activity measurements to be 
~5.5 x 10 17 . The total volume of material in the tank 
was 28.6 £, and sample analysis indicated that the 
uranium concentration was 77 g/ i . Of the personnel in 
the area at the time of the accident, 17 received doses 
of 0.1 rem or less, 7 between 0.1 and 0.2 rem, and 3 
between 0.2 and 0.27 rem. The process equipment was 
not damaged and no contamination occurred. Normal 
operations were resumed within several days. During 
the following 2 to 3 years most of the process equip¬ 
ment (-94%) was replaced with favorable geometry 
vessels. 
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17. Mayak Production Association, 10 December 1968 

Plutonium solutions (aqueous and organic) in a 60 liter vessel; three excursions; one fatality , one serious 
exposure. 


The accident occurred in a building where various 
chemical and metallurgical operations with plutonium 
were performed. Operations were conducted on four, 
6-hour, shifts per day. The accident occurred on the 
19:00 to 01:00 (10-11 December) shift. An unfavor¬ 
able geometry vessel was being used in an improvised 
and unapproved operation as a temporary vessel for 
storing plutonium organic solution. Two independent 
handling operations with this same vessel and same 
contents less than one hour apart led to two prompt 
critical excursions, each one resulting in the severe 
exposure of a worker. A weak excursion occurred 
between the two energetic ones, when there were no 
personnel present. 

A small scale research and development operation 
had been set up in a basement area to investigate the 
purification properties of various organic extractants. 
As originally built, the equipment and piping configu¬ 
ration of this research operation precluded these 
organics from reaching a set of two 1,000 £ tanks used 
for the collection of very lean aqueous solutions 
(<1 g Pu II) that were also in the basement. Due to a 
combination of factors (changes to the piping, etc.), 
organics had inadvertently and unknowingly migrated 
in significant volume to one of these large aqueous 
solution tanks in a nearby basement room. 

Figures 23 and 24 show plan and elevation views of 
these tanks, and the other vessels involved in the 
accident by their location in the basement room. Each 
tank had an operating volume of 800 £. Each was 
equipped with neutron detectors located near the 
bottom to monitor the plutonium concentration and to 
detect any sediment accumulation. 

On 10 December, the 19:00 shift supervisor 
instructed an operator to sample the contents of tank 2 
before transferring it to recovery operations. Since the 
sampling device was out of order, the sample was 
taken by lowering a glass vial on a thin line through 
one of the upper level sensor ports [Figure 24]. The 
results of the analysis indicated that the plutonium 
concentration was ~0.6 g/£. Since the total volume of 
solution in the tank was -800 liters, the total plutonium 
mass was -480 g, which exceeded the criticality safety 
mass limit of 400 g. According to regulations, the shift 
supervisor then ordered that two additional confirma¬ 
tory samples be taken. 

When taking these additional samples, it was 
noticed that the solution in both vials was a combina¬ 
tion of organic and aqueous solution. The supervisor 
ordered the decanting of the samples to remove the 
organic solution before sending the samples for 


analysis. In fact, two different organic extractants had 
been used heavily in the nearby research operations 
since tank 2 had been last cleaned. As a result, a layer 
of organic solution with properties resulting from the 
two different extractants had gradually formed on top 
of the aqueous solution in tank 2. 

The access port of tank 2 was then opened, and the 
contents were visually inspected. This confirmed the 
presence of the organic solution layer. Knowing that 
the downstream equipment was not capable of properly 
treating organic solution, the supervisor decided to first 
remove the organic layer and then to transfer a part of 
the aqueous solution into tank 1 to come into compli¬ 
ance with the mass limits. These decisions were made 
before the results of the confirmatory sample analyses 
arrived. 

The temporary arrangement of equipment used to 
remove the organic solution from tank 2 is shown in 
Figures 23 and 24. Two reinforced rubber hoses, 1.2 m 
in length and 13 mm in internal diameter, were fixed 
into the neck of a 20 £ glass bottle (usually used for 
chemical reagents) with a cloth plug. One hose was 
connected to the vacuum line on tank 1 and the other 
was lowered into tank 2 through its access port. If 
the 20 £ bottle became full, it was decided that the 
contents would be poured into a 60 £ vessel usually 
used for the collection of very low concentration 
wastes before reprocessing. The bottle and vessel were 
placed on the platform above tanks 1 and 2. The use of 
these types of temporary, improvised, setups as well as 
the use of unfavorable geometry vessels were strictly 
prohibited by existing regulations. 

In the presence of and under instructions from the 
shift supervisor, two operators used the improvised 
setup to begin decanting the dark brown (indicative of 
high plutonium concentration) organic solution. The 
shift supervisor then left to tend to other duties. After 
having filled the bottle with approximately 17 liters the 
operators noted that there was still some amount of 
organic solution remaining in tank 2. The bottle was 
then emptied by pouring the contents into the 60 £ 
vessel. During the second filling of the bottle, a 
mixture of aqueous and globules of organic solution 
were being drawn into the bottle. As a result the 
operators stopped filling the bottle. One operator then 
went on to other duties while the other went to the shift 
supervisor for further instructions. 

Under instructions from the supervisor, the second 
operator resumed the decanting of the solution from 
tank 2 to the bottle. By carefully adjusting the depth of 
immersion of the hose from the access port the 
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Figure 23. Plan view of the tanks involved in the accident. 



Figure 24. Elevation view of the tanks involved in the accident. 

















operator was again able to fill the bottle, this time to 
nearly 20 £. Having disconnected the bottle from the 
hoses, the operator then poured its contents in the 60 £ 
vessel for a second time. After almost all of the 
solution had been poured out of the bottle, the operator 
saw a flash of light and felt a pulse of heat. Startled, 
the operator dropped the bottle, ran down the stairs and 
from the room. The bottle, which had only a small 
amount of solution remaining, broke, splashing the 
remaining contents around the base of the 60 £ vessel. 

At the instant of the excursion (22:35), the critical¬ 
ity alarm sounded in the room above the tanks. All 
personnel promptly evacuated to the assigned location 
(an underground tunnel connecting two adjacent 
buildings). A similar criticality alarm system in a 
building approximately 50 m away also sounded 
almost immediately thereafter, but only for 3 to 5 
seconds. After the first excursion, the radiation control 
supervisor on duty informed the plant managers of the 
accident. He then directed the operator to a decontami¬ 
nation and medical facility, collected the dosimeters 
(film badges) from all personnel, and strictly warned 
them not to enter the building where the accident had 
occurred. 

A second excursion was recorded at 23:50, possibly 
due to cooling of the solution or the release of gas due 
to a chemical reaction within the solution. This 
excursion was clearly weaker than the first as it was 
detected only by thermal neutron detectors within 15 m 
of the accident. It most likely did not attain prompt 
criticality or lead to the ejection of solution from the 
vessel. It occurred when all personnel were at the 
emergency assembly location. 

The shift supervisor insisted that the radiation 
control supervisor permit him to enter the work area 
where the accident had occurred. The radiation control 
supervisor resisted, but finally accompanied the shift 
supervisor back into the building. As they approached 
the basement room where the accident had occurred, 
the y-radiation levels continued to rise. The radiation 
control supervisor prohibited the shift supervisor from 
proceeding. In spite of the prohibition, the shift 
supervisor deceived the radiation control supervisor 
into leaving the area and entered the room where the 
accident had occurred. 

The shift supervisor’s subsequent actions were not 
observed by anyone. However, there was evidence that 
he attempted to either remove the 60 £ vessel from the 
platform, or to pour its contents down the stairs and 
into a floor drain that led to a waste receiving tank. 
(Solution was found on the floor near the drain and 
around the 60 £ vessel at the top of the stairs.) What¬ 
ever his actions, they caused a third excursion, larger 
than the first two, activating the alarm system in both 
buildings. 


The shift supervisor, covered in Pu organic solution, 
immediately exited the room and returned to the 
underground tunnel. The shift supervisor was then sent 
to the decontamination and medical facility. At 00:45 
the site and building managers arrived. Based on an 
analysis of available documentation, radiation monitor 
readings, and interviews with personnel, a recovery plan 
was developed. By 07:00 the solution in the 60 £ vessel 
had been transferred to several favorable geometry 
containers. A long handled, large radius of curvature 
hose and a portable vacuum pump were used to transfer 
the solution out of the vessel. 

Both severely exposed personnel were flown to 
Moscow for treatment on 11 December. Samples of 
their blood showed very high 24 Na activities. Adjusted 
to the instant of the exposure, they were 5,000 decays/ 
min/m^ (83 Bq/cm 3 ) for the operator and 15,800 de- 
c ay s/m in/m £ (263 Bq/cm 3 ) for the shift supervisor. The 
operator received an estimated absorbed dose of about 
700 rem and the shift supervisor about 2,450 rem. The 
operator developed acute, severe radiation sickness; 
both his legs and one hand were amputated. He was still 
living 31 years after the accident. The shift supervisor 
died about one month after the accident. 

The remaining personnel underwent medical evalua¬ 
tions on the day of the accident. Their dosimeters (film 
badges) which had just been issued to the personnel on 
20 November and 21 November 1968, were used to 
estimate their doses. The dosimeters indicated that only 
6 out of the remaining 27 personnel received doses 
exceeding 0.1 rem. Their doses were estimated to be 
1.64 rem, 0.2 rem, and four with less than 0.15 rem. The 
operator’s dosimeter was overexposed, and the shift 
supervisor’s dosimeter, taken by the radiation control 
supervisor after the first excursion, indicated a dose 
0.44 rem. 

Altogether, 19.14 t of solution were recovered from 
the 60 £ vessel. This was a mixture containing 12.83 £ 
of organic solution with a plutonium concentration of 
55 g/ £ and 6.31 £ of aqueous solution with a plutonium 
concentration of 0.5 g/£. Therefore, the plutonium mass 
that remained in the 60 £ vessel after the last excursion 
was about 709 grams. The volume of organic solution 
and plutonium mass spilled or ejected from the vessel 
could only be estimated as 16 £ and 880 grams, 
respectively. 

The number of fissions in the two prompt critical 
excursions was estimated from (1) the doses received by 
the operator and shift supervisor and (2) the measured 
exposure rate from fission product gamma-rays 
(1.5 mR/s at 3 m from the vessel, 1 hour after the last 
excursion). The number of fissions in the first excursion 
was estimated at 3 x 10 16 , and in the last excursion 
about 10 17 fissions. The vessels containing the solution 
were placed in an isolated room until the radiation levels 
decayed to an acceptable level, at which time the 
solution was reprocessed. 
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The investigation identified several contributing 
factors to the accident: 

• The shift supervisor’s decision to take actions that 
were improvised, unauthorized, and against all 
regulations, to recover from the plutonium mass 
limit excess in tank 2. 

• Changes to the original piping system that had 
precluded organic solution transfers to the aqueous 
solution tanks. As a result of these changes, organic 
solution could be sent to these tanks in three differ¬ 
ent ways. These included, (1) the operation of cer¬ 


tain valves out of the proper sequence, (2) through 
the vacuum and vent lines in the event of stop-valve 
failures, and (3) through the purposeful transfer of 
aqueous solution containing held up organic solu¬ 
tion from the extraction facility 

• A transfer from tank 1 to tank 2 of about 10 i solu¬ 
tion with an unknown plutonium content 
on 10 December 1968 between 07:00 and 13:00. 

The small scale organic solution research and 
development operation was discontinued in this 
building as a result of the accident. 


18. Windscale Works, 24 August 1970 25 ’ 2627 

Plutonium organic solution in a transfer vessel; one excursion; insignificant exposures. 


This criticality accident is one of the more interest¬ 
ing and complex because of the intricate configurations 
involved. The plant was used to recover plutonium 
from miscellaneous scrap, and the processes used were 
thought to be subject to very effective controls. 
Recovery operations started with a dissolver charge of 
about 300 g of plutonium. Following dissolution, the 
supernatant was transferred through a filter to a 
conditioner vessel, where the concentration was 
adjusted to between 6 and 7 g Pu Ii, less than the 
minimum critical concentration. 

The solution was vacuum lifted from the conditioner 
to a transfer vessel (Figure 25). When the transfer was 


completed, the vacuum was broken and the transfer 
vessel contents were allowed to drain into a constant 
volume feeder that supplied a favorable geometry, 
pulsed, solvent extraction column. The connection 
from the transfer vessel to the constant volume feeder 
was through a trap 25 feet (7.6 m) in depth, that 
prevented any potential backflow and thus controlled 
contamination. 

The excursion occurred on completion of the 
transfer of a 50 i batch of solution from the condi¬ 
tioner to the transfer vessel. The small size 
(10 15 fissions) and brief duration (less than 10 s) of the 
excursion precluded the termination of the excursion 



Figure 25. Process equipment related to the criticality accident. 


43 









due to any energy based shutdown mechanism. 
Radiation measurements indicated that the excursion 
occurred in the transfer vessel, but the solution from 
the conditioner was too lean to sustain criticality, and 
the total quantity of plutonium in the batch (300 g) was 
about 50% of the minimum critical mass. Thus, it was 
feared that the transfer vessel might contain large 
quantities of solids, perhaps tens of kilograms and that 
any disturbance of the system might cause another, 
possibly much larger, excursion. 

A 6 inch (150 mm) diameter hole was cut through 
the concrete roof, and the vacuum line to the transfer 
vessel was opened. The interior of the transfer vessel 
was inspected with a fiber-optics system (developed 
specifically for this recovery operation) and was found 
to contain liquid. A small diameter plastic line was 
inserted into the vessel and 2.5 i aliquots were 
siphoned to a collection point in an adjacent building. 
Inspection of the liquid revealed tributyl phosphate and 
kerosene with a specific gravity of 0.96 that contained 
55 g Pu/ i . Aqueous solution from the conditioner had 
a specific gravity of 1.3. A column 25 feet (7.6 m) in 
height of aqueous solution in one arm of the trap was 
sufficient to balance approximately 33.8 feet (10.3 m) 
of solvent in the other arm. Thus any solvent intro¬ 
duced into the transfer vessel was held in the arm and 
could accumulate until the volume of solvent corre¬ 
sponded to a height of 33.8 feet (10.3 m) above the 
bottom of the trap. Some 39 £, containing about 
2.15 kg Pu, were present. Degradation of the solvent 
indicated it had been trapped in the transfer vessel for 
several months and perhaps for as long as 2 years. 

Each time a batch of aqueous solution was pro¬ 
cessed through the transfer vessel, the organic extract¬ 
ant would strip some plutonium from the aqueous 
solution. With each transfer, the plutonium concentra¬ 
tion in the tributyl phosphate and kerosene increased. 
The operation that resulted in the excursion probably 
added about 30 g of plutonium to the solvent. Periodic 
plant cleanout by flushing nitric acid through the 
system presumably reduced the plutonium concentra¬ 
tion in the trapped solvent. Thus, the concentration 


Vacuum 




may have been slowly increased, then been abruptly 
reduced. Several such cycles could have been repeated 
before the system achieved criticality. The drain rate of 
the transfer vessel was not sufficient to account for the 
brief duration of the excursion. 

A transparent plastic mockup of the transfer vessel 
was used to observe the configuration of the liquids 
during transfer. The situation existing during the 
transfer is shown in Figure 26A. Rich organic (55 g/£) 
is floating on top of lean aqueous solution (6 to 7 gl l). 
The aqueous solution stream pouring into the center of 
the vessel provides a region of low reactivity. Between 
the organic and aqueous is a region of mixed phases, 
about 3 inches (7.6 cm) thick near the axis of the 
vessel. This configuration is subcritical. 

Just after completion of the transfer (Figure 26B) 
the central plug of aqueous solution has disappeared, 
the region of mixed phases is still present, and the 
configuration has reached the state of maximum 
reactivity. Separation of the two phases occurs within a 
few seconds of completing the transfer (Figure 26C). 
Monte Carlo calculations have indicated that the 
reactivity of Figure 26B is about 5 $ greater than that 
of Figure 26A and about 10 to 15 $ greater than 
Figure 26C. 

Apparently, there was sufficient time between nitric 
acid washes for the plutonium concentration to 
increase until the system became slightly supercritical 
at the conclusion of a transfer, tripping the criticality 
alarms. 

Two people were in the plant at the time of the 
accident. One received an estimated dose of 2 rad, the 
other less than 1 rad. 

This excursion illustrates the subtle ways in which 
accidents can occur during solution processing. 
Although the deep trap was considered a safety feature 
for the control of contamination, it contributed directly 
to the criticality accident. The difficulty of understand¬ 
ing what had happened, even after it was known in 
which vessel the excursion occurred, is an excellent 
example of the impracticability inherent in attempting 
to calculate criticality accident probabilities for 
specific processes. 



Figure 26. Solution 
transfer as re¬ 
constructed from the 
transparent plastic 
mockup of the transfer 
vessel. Configuration 
(B) is the postulated 
state at the time of the 
accident. 
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19. Idaho Chemical Processing Plant, 17 October 1978 28 ’ 29 ’ 101 

Uranyl nitrate solution, U(82), in a lower disengagement section of a scrubbing column; excursion history 
unknown; insignificant exposures. 


The accident occurred in a shielded operation of a 
fuel reprocessing plant in which solutions from the 
dissolution of irradiated reactor fuel were processed by 
solvent extraction to remove fission products and 
recover the enriched uranium. 

In the solvent extraction process, immiscible 
aqueous and organic streams counter-flow through 
columns while in intimate contact and, through control 
of chemistry, material is transferred from one stream to 
the other. A string of perforated plates along the axes 
of the columns was driven up and down forming a 
“pulsed column” that increased the effectiveness of 
contact between the two streams. The large diameter 
regions at the top and bottom of the columns were 
disengagement sections where the aqueous and organic 
streams separated. 

In this particular system (Figure 27), less dense 
organic (a mixture of tributyl phosphate and kerosene) 
was fed into the bottom of the G-l 11 column while an 
aqueous stream containing the uranium and fission 
products was fed into the top. As the streams passed 
through the pulsed column, uranium was extracted 
from the aqueous stream by the organic with fission 
products remaining in the aqueous stream. The 
aqueous stream containing fission products was 
sampled from the bottom of the G-l 11 column to 
verify compliance with uranium discard limits before 
being sent to waste storage tanks. The organic product 
stream (containing about 1 g XJ/ £) from the top of the 
G-l 11 was fed into a second column, H-100, at the 
bottom of its lower disengagement section. 

In H-100, the organic product was contacted by a 
clean aqueous stream (fed into the top) to scrub out 
residual fission products. The aqueous stream was 
buffered with aluminum nitrate to a concentration of 
0.75 molar to prevent significant transfer of uranium 
from the organic stream to the aqueous stream. In 
normal operation, a small amount of uranium (about 
0.15 gf £) would be taken up by the aqueous stream, 
which was, therefore, fed back and blended with the 
aqueous recovery feed going into G-l 11. The organic 
stream from H-100, normally about 0.9 gU/f, went 
on to a third column, where the uranium was stripped 
from the organic by 0.005 molar nitric acid. The output 
of the stripping column then went to mixer settlers 
where additional purification took place. Still further 
downstream, the uranium solution went to an evapora¬ 
tor where it was concentrated to permit efficient 
recovery of the uranium. 

Several factors contributed to this accident. The 
water valve on the aluminum nitrate make-up tank 
(PM-106) used for the preparation of the aqueous feed 


for the scrubbing column, H-100, had been leaking for 
about a month prior to the accident. Over time, this 
leak caused a dilution of the feed solution from 0.75 M 
to 0.08 M. The 13,400 t make-up tank was equipped 
with a density alarm that would have indicated the 
discrepancy, but the alarm was inoperable. A density 
alarm was scheduled to be installed on the 3,000 i 
process feed tank (PM-107) that was filled, as neces¬ 
sary, from the make-up tank, but this had not been 
done. The make-up tank was instrumented with a 
strip-chart recorder showing the solution level in the 
tank. However, the leak into the tank was so slow that 
the change in level would have not have been discern¬ 
ible unless several days worth of the chart was ana¬ 
lyzed. To complicate matters, the chart recorder had 
run out of paper on 29 September and it was not 
replaced until after the accident. Furthermore, proce¬ 
dures that required the taking of samples from the feed 
tank, PM-107, to confirm the density, were not being 
followed. 



Figure 27. First cycle extraction line equipment. The 
accident occurred in the lower disengagement section 
of the FI-100 column. 
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The out-of-specification aqueous feed to the H-100 
scrubbing column caused it to operate as a stripper 
rather than as a scrubber. Some of the enriched 
uranium was removed from the H-100 column organic 
and recycled into the input of G-l 11. This partially 
closed loop resulted in a steady increase in the uranium 
inventory in the two columns. Each time diluted 
solution was added to the feed tank from the make-up 
tank, the aluminum nitrate concentration in the feed 
was further reduced and stripping became more 
effective until the excursion occurred. 

Analyses of the aqueous feed for column H-100 
(feed tank PM-107) showed the proper concentration 
of 0.7 M aluminum nitrate on 15 September 1978. 
Samples taken on 27 September and 18 October (the 
day after the accident) had concentrations of 0.47 M 
and 0.084 M, respectively. Concentrations of alumi¬ 
num nitrate less than 0.5 M would allow some strip¬ 
ping of uranium from the organic, and the final 
aluminum nitrate concentration would result in almost 
all of the uranium being stripped from the organic. 

The feed tank (PM-107) was filled with aluminum 
nitrate solution from the make-up tank (PM-106) at 
about 18:30, on 17 October. At approximately 20:00, 
the process operator was having difficulty in control¬ 
ling the H-100 column. During his efforts to maintain 
proper operation, he reduced the system pressure 
causing an increased aqueous flow from H-100 back to 
G-l 11. At approximately 20:40, a plant stack radiation 
monitor alarmed, probably because of fission products 
in the plant stack gases. Shortly after this alarm, 
several other alarms activated and the plant stack 
monitor gave a full-scale reading. The shift supervisor 
and the health physicist went outside the building and 
detected radiation levels up to 100 mrem/h. At 21:03, 
the shift supervisor ordered the building evacuated, and 
by 21:06 an orderly evacuation had been completed. 
Road blocks were established and management was 
notified. 

It is probable that as the uranium inventory in the 
bottom of H-100 increased the system achieved the 
delayed critical state, then became slightly super¬ 
critical. As the power increased, the temperature rose 
compensating for the reactivity introduced by the 
additional uranium. This process would continue as 
long as the uranium addition was slow and until the 
reduced pressure on the column permitted more rapid 
addition of uranium and a sharp increase in reactivity. 
The system is thought to have approached prompt 
criticality, at which time the rate of power increase 
would have been determined by the neutron lifetime 
(on the order of milliseconds). 

Prior to evacuating, the process operator shut off all 
feed to the first cycle extraction process, but did not 
stop the pulsation of the columns. The continuation of 
the pulse action after the feed was turned off probably 
led to better mixing of the solution in the bottom 


section of H-100 and terminated the excursion. Later 
analysis showed that the excursion had occurred in the 
lower disengagement section of the H-100 column. 
Records indicate the reaction rate increased very 
slowly until late in the sequence, when a sharp rise in 
power occurred. The uranium inventory in Column H- 
100 was estimated to have been about 10 kg, compared 
with slightly less than 1 kg during normal operation. 
The total number of fissions during the excursion was 
estimated to be 2.7 x 10 18 . 

Several factors contributed to this accident. 

• The water valve on the aluminum nitrate make-up 
tank (PM-106) used for preparation of the aqueous 
had been leaking for about a month prior to the 
accident. 

• Significantly more solution had been transferred 
from the make-tank to the feed tank than should 
have been available (because of the leak). This was 
not noticed by any of the plant staff. 

• The chart recorder for the make-up tank that would 
have shown the solution level had run out of paper 
weeks earlier. The paper was not replaced until after 
the accident. 

• The density recorder and alarm on the aluminum 
nitrate feed tank, PM-107, had not been installed 
even though it appeared on the controlled drawings 
of the plant. 

• The operating procedure that required sampling 
before transfer between the aluminum nitrate 
make-up and feed tanks was not followed. Further¬ 
more the procedure actually used on the process 
floor was an older out-of-date version that did not 
contain this requirement. 

• In the two years preceding the accident, the experi¬ 
ence level of the operators had decreased dramati¬ 
cally. 

• The safety analysis prepared in 1974 identified the 
criticality risk if the aluminum nitrate scrub feed 
were to become dilute, but incorrecly assumed that 
stoppage of the scrub feed was also necessary. The 
evaluation process had been excessively focused on 
the physics of subcriticality and not on risk assess¬ 
ment. 

There were no significant personnel exposures and 
no damage to process equipment. As a direct result of 
this event, the plant suffered an extended and expen¬ 
sive shutdown. Operating procedures were reviewed in 
detail and revised as appropriate. Increased emphasis 
was given to plant maintenance and operator training. 
An extensive and highly instrumented plant protection 
system involving redundant sensors and redundant 
automatic safety controls was installed. The impor¬ 
tance of maintenance of safety related equipment and 
the need for adherence to well developed operating 
procedures were reemphasized by this accident. 
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20. Siberian Chemical Combine, 13 December 1978 

Plutonium metal ingots in a storage container; single excursion; one serious exposure, seven significant 
exposures. 


Various operations with a-phase plutonium metal 
ingots were performed in Building 901, Department 1, 
of this plant. There were 16 interconnected gloveboxes 
manned by a total of 7 operators. Although the 
operators were trained on all of the individual opera¬ 
tions, each would be assigned only a particular subset 
at the beginning of each shift. By written procedure, it 
was not allowed for an operator to deviate from his 
assigned tasks even if the deviation involved assisting 
others with their tasks. 

Transfer and temporary storage of the ingots within 
the gloveboxes was accomplished using cylindrical 
storage containers designed specifically for this 
purpose. The containers were lined with a 0.5 mm 
thick cadmium layer and had a 30 mm thick shell of 
polyethylene encased in a stainless steel sleeve 
(Figure 28). The design decreased the neutron interac¬ 
tion for a planar array to such a degree that it was not 
necessary to control the number or storage arrange¬ 
ment of the containers within any of the gloveboxes. 

The ingots were produced from a direct oxide 
reduction process and were in the shape of a frustum of 
a cone. The dimensions of the ingots are no longer 



Figure 28. Storage container. 


known. Depending on the origin of the feed material 
the upper mass limit of an ingot was either 2 kg (waste 
recovery, precipitation/calcination) or 4 kg (relatively 
pure oxide). The general administrative limit for the 
storage containers in this building allowed up to 
2 ingots totaling 4 kg or less. However, the size of the 
container did not preclude the possibility of loading 
multiple ingots to levels in excess of a critical mass. It 
was assumed that the operating personnel, because of 
their proficiency and discipline, would not make gross 
errors (more than twice the administrative limit) in 
loading the containers or ignore the safety limits. 

Glovebox 13, where the criticality accident took 
place, consisted of three workstations, (1391-A, 
1391-B, and 1392, see Figure 29) and was connected 
to gloveboxes 12 and 6 by a pass-through port and 
conveyor, respectively. All of the ingots produced at 
the plant passed through this glovebox operation. For 
these particular workstations, the administrative limit 
for the containers was even stricter, allowing only one 
ingot regardless of its mass. Workstation 1391-A was 
used for extracting drill samples (up to 0.1 g) for 
chemical analysis of the impurities. The ingots were 
weighed in workstation 1391-B, where the samples 
were also temporarily stored. Workstation 1392 was 
used for measuring the dimensions of the ingots. 
Within the workstations the ingots were removed and 
returned to their original containers one at a time. The 
workstations were equipped with pass-through ports in 
the connecting walls, gloveports, and 50 mm thick 
leaded glass windows. The front of the workstation 
had a 30 mm thick lead shield to reduce the y-radiation 
from the plutonium. 

At the beginning of the shift on 13 December 1978, 
three containers were in workstation 1391-B, and four 
containers were in workstation 1392, each with one 
ingot. The ingots are numbered sequentially in 
Figure 29 for the purpose of the discussion that 
follows. Although the containers are depicted as being 
linearly arranged, in actuality the containers holding 
ingots 4 and 5 were behind those with ingots 6 and 7, 
making visual inspection of the contents more difficult 
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than implied by the figure. At the time of the accident, 
processing of six of the ingots had been completed, and 
only ingot 3 needed to remain in 1391-B. According to 
the shift instructions, Operator A was to 

1. transfer the six processed ingots to glovebox 6, and to 

2. transfer four ingots from glovebox 6 and two from 

glovebox 12 to glovebox 13 for processing. 

The intended order of ingot transfers, as specified in 
the shift instructions, is illustrated in Figure 30. The 
actual order of ingot transfer is shown in Figure 31, 
Frames 1 through 6. Operator A transferred two ingots, 

6 and 7, from workstation 1392 to glovebox 6. These 
ingots were replaced in workstation 1392 by two ingots, 
8 and 9, from glovebox 6. Both of these actions were in 
accordance with the shift instructions. 

Motivated by production pressures to conduct the 
ingot transfers as soon as practical, Operator A (without 
authorization and in violation of procedures) requested 
Operator B to assist him. Operator A then instructed 
Operator B to transfer ingots 1 and 2 to glovebox 6 and 
to reload their containers with ingots 10 and 11 from 
glovebox 12. However, Operator B, who was not 
working from written instructions, instead transferred 
ingot 3 into the container already holding ingot 4, 
violating the container administrative limit. Operator B 
then transferred ingot 10 from glovebox 12 to the 
container that previously held ingot 3 within 1391-B. 

Operator A, who had left the area to perform other 
tasks, then returned and resumed the work as per the 
shift instructions, assuming, but not confirming, that 
Operator B had performed the tasks requested. 

Operator A then transferred ingots 1 and 2, believing 
them to be ingots 10 and 11, into the same container 
already holding ingots 3 and 4 (data on the individual 
ingots as to size and mass are not well known). The 


actions of Operator A, even if the container in 1392 had 
been empty, were also a direct violation of the container 
administrative limit. Frames 5 and 6 of Figure 32 show 
these transfers. 

While placing the fourth ingot, 1 (mass less than 
2 kg), into the container, Operator A experienced an 
instantaneous and significant rise in the temperature near 
his hands and arms and saw a flash of light. The 
excursion was immediately terminated due to thermal 
expansion and the removal or ejection of ingot 1. The 
total mass of the four ingots was 10.68 kg. At the same 
instant, the criticality alarm sounded in two buildings, 
901 and 925, causing all personnel to evacuate. The 
alarm system detectors were G-M tubes with activation 
thresholds of 110 mR/h. 

After the alarm systems had sounded, Operator A 
removed two of the three remaining ingots from the 
container, moving one into workstation 1391-A, and the 
other into 1391-B. During the investigation, the operator 
could not clearly recall if he had instinctively removed 
his hand while still holding the fourth ingot or if it had 
been forcefully ejected as the result of a sudden thermal 
expansion brought on by the rapid energy release. 

Plutonium samples were taken from each of the four 
ingots and analyzed for 140 La content using gamma-ray 
spectrometry. From this the number of fissions in this 
single excursion was estimated to be 3 x 10 15 . 

Operator A received an estimated total body dose of 
250 rad, and more than 2,000 rad to his arms and hands, 
necessitating amputation up to the elbows. Later his 
eyesight also became impaired. Seven other people 
located at various distances from glovebox 13 received 
doses between 5 and 60 rad, with the predominant 
contribution being from fast neutrons. The equipment 
was not damaged and no contamination resulted. 


To Glovebox 6 


To Glovebox 6 



From Glovebox 6 


From Glovebox 12 




Figure 30. Intended sequence for the transfer of ingots from and to Glovebox 13. 
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To Glove box 6 



From Glovebox 6 



i 

i 

i 

I 




From Glovebox 12 




Figure 31. Actual order of ingot transfers from and to Glovebox 13. The solid lines represent the actions of operator A 
and the dotted lines the actions of operator B. 
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21. Novosibirsk Chemical Concentration Plant, 15 May 1997 

Uranium oxide slurry and crusty U(70) y in the lower regions of two parallel vessels; multiple excursions; 
insignificant exposures. 


This accident occurred in Building 17 where highly 
enriched U(90) fuel rods were fabricated from U0 2 
and aluminum, using the powder metallurgy method. 
The final process prior to placing a rod into its alumi¬ 
num cladding was chemical etching. The objective of 
this operation was to remove microscopic defects on 
the rod surfaces to ensure tight contact between the rod 
and its cladding. The major components of the process 
equipment are shown in Figure 32. 

The etching process involved consecutively immers¬ 
ing a batch of rods into three separate vessels filled 
with sodium hydroxide (alkali), water, and nitric acid, 
respectively. As a result of a chemical reaction with the 
sodium hydroxide, some of the aluminum particles on 
the surface of the rods formed the precipitates, NaA10 3 
and Al(OH) 3 . The etching process leached a small 
fraction of the uranium dioxide from the rods which 
was also deposited on the bottom of the alkali vessel. 
The rods were then washed in the second vessel with 
water to remove as much alkali as possible. In the final 
vessel of nitric acid, any traces of alkali were neutral¬ 
ized and the rods were etched to their final size by 
dissolving U0 2 particles from their surfaces. 



Figure 32. Major components of the chemical-etching 
process. 


Once the etching process with one batch of rods 
was completed, the contents from all three immersion 
vessels was gravity drained to a 130 mm diameter 
cylindrical collection vessel. As the collection vessel 
filled, the etching solution was pumped to receiver 
vessels 59-A and 59-B through a 64 mm diameter pipe 
that was about 100 m in length. Eventually, the etching 
solution would be transferred from the receiver vessels 
to the uranium recovery section of the building. 

The etching process had been standardized 13 years 
before the criticality accident. During this 13 year 
period, the controlled parameters were the number of 
rods per batch, the temperature, the concentration of 
the reagents, and the duration of the immersion 
operations. Uranium content in the etching solutions 
was not measured. In fact, since all of the equipment, 
with the exception of the immersion vessels, was of 
favorable geometry (according to design and records), 
there was no capability within the building to deter¬ 
mine the uranium content of the etching solutions. 
Precipitate formation and uranium deposition in the 
service piping was also not monitored. 

In 1996 a solid U0 2 deposit was discovered in the 
collection vessel when it was opened and inspected. 
The 5.5 kg deposit (uranium mass fraction of -69%) 
was gradually removed by dissolving it with nitric 
acid. Analyses showed that the deposit had been 
forming for over 10 years since it contained some 
uranium enriched to only 36% by weight. Uranium 
enriched to 36% by weight had not been processed 
since around 1986 when a switch to U(90) was made. 

Despite the discovery of this deposit, the logical 
search for similar deposits in the service piping and in 
the receiver vessels was not initiated, primarily 
because the criticality safety limits for those compo¬ 
nents did not include requirements to monitor for 
uranium accumulation. In fact, for the purposes of the 
annual material inventory, the entire building was 
designated as one fissile material balance area. 
Therefore, the small fraction of uranium being depos¬ 
ited in the receiver vessels per batch of rods went 
unnoticed because of the large size of the fissile 
material balance area. 

The receiver vessels were of slab geometry, with 
common inlet and outlet lines for the transfer of 
solutions. Each vessel was 3.5 m in height and 2 m in 
length, with a design thickness of 100 mm and an 
operating volume of -650 i. Both vessels were made 
from 4 mm thick stainless steel. The distance between 
the vessels was 0.8 m, and they were mounted -0.75 m 
above the concrete floor. Dimensional control of the 
thickness was provided by internal steel rods welded 
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on a 0.4 m square pitch grid. The bottom of the vessels 
were sloped -20 degrees toward the drain. Steel sheets 
were placed at 140 mm from the outside surfaces 
(3.5 m x 2 m) to preclude close reflection. 

When the vessels were installed they had been 
approved for use with uranium enriched to a maximum 
of 36%. However, the nuclear regulatory authority had 
not been consulted when the change to the higher 
enrichment, U(90), was implemented. 

At 10:00, Thursday 15 May 1997, after completing 
the etching of a batch of rods, an operator drained the 
etching solutions from the immersion vessels into the 
collection vessel. A pump was then turned on for about 
15 minutes to transfer the etching solutions to the 
receiver vessels. 

At 10:55, the criticality alarm system, which 
included 12 monitoring stations,* sounded in Build¬ 
ing 17, and personnel promptly evacuated. Emergency 
response personnel arrived, and health physicists began 
an assessment of the radiation levels both inside and 
outside of the building. 

Based on exposure rate measurements made with 
portable instruments, the accident location was 
determined to be receiver vessels 59-A and 59-B 
located on the ground floor. Twenty-five minutes after 
the alarm had sounded, the exposure rate 0.5 m from 
the receiver vessels was -10 R/h. 

As a recovery action, it was decided to pump 
borated solution into the receiver vessels using the 
same system for transferring the etching solutions. A 
natural boron solution was prepared by mixing 20 kg 
of dry boric acid with water. The borated solution was 
first introduced into the collection vessel and then 
transferred through the normal piping to the receiver 
vessels. After transferring the borated solution, the 
receiver vessels were almost completely filled; the 
remaining free volume in each vessel was about 30 £. 

Despite this action, the alarms once again sounded 
at 18:50 that same day, indicating that a second 
excursion had occurred. This was followed by a third 
excursion at 22:05, and a fourth and fifth at 02:27 and 
07:10 on 16 May. 

After additional analysis of the situation, it was 
decided to alter the manner in which solution was fed 
into the receiver vessels. A method of producing a 
forced circulation of a highly concentrated solution of 
lithium chloride was implemented. Lithium chloride 
was chosen rather than boric acid because of its much 
higher solubility. To ensure the safety of the personnel 
involved, injection of lithium chloride was delayed 
until after the sixth excursion took place at 13:00. At 


14:00, the forced circulation of the lithium chloride 
solution was begun and the system was driven perma¬ 
nently subcritical. 

After several hours of circulation and intensive 
mixing of the solution, it was sampled for chemical 
analysis. The results of the analysis showed the 
following concentrations: 

Uranium 6 g/£, 

Lithium 6 g/£, 

Boron 0.5 g/£, 

and an overall solution pH between 9 and 11. 

Given this concentration of uranium and a total 
solution volume of -1,300 £ in the two receiver 
vessels, the uranium mass was estimated to be -7.8 kg. 
This result was at odds with design calculations that 
indicated a minimum critical mass in excess of 100 kg 
of 235 U at concentrations well above 50 g/ £ for this 
two vessel system. It was conjectured that this discrep¬ 
ancy could be explained either by the differences 
between the design and actual thickness of the receiver 
vessels or by additional uranium deposits within the 
vessels. The investigation proceeded to examine both 
possibilities. 

The possibility that the receiver vessels contained 
additional uranium in the form of deposits was 
reinforced by filtering solution samples during the 
circulation process. The pure solution that passed 
through the filter had a uranium concentration of only 
-0.3 g/ £, i.e., 20 times smaller than before filtration. 
Therefore, the well mixed 6 g/ £ solution was more 
accurately characterized as a slurry of U0 2 particles, 
rather than a true solution. Periodic draining of the 
tanks would have left behind a wet paste of precipitates 
that may have hardened over time. 

A portable, collimated detector was then used to 
determine the distribution of the uranium in the 
receiver vessels by measuring the fission product 
gamma-rays. In order to decrease the background, 

12 mm thick lead shielding was placed between the 
receiver vessels. As a result of gamma scanning of the 
vessels’ lateral surfaces, it was determined that the 
uranium was located almost exclusively in the bottom 
regions of both vessels, distributed similarly, and 
covering about 1 m 2 in area. Lurthermore, the uranium 
mass of the deposit in vessel 59-A was about 2.8 times 
greater than that in vessel 59-B. 

On 20 May, the cleaning of the receiver vessels was 
begun. The tanks were first drained and U0 2 particles 
were filtered out and dissolved in favorable geometry 
vessels using nitric acid. Remaining in the vessels, as 


*Each monitoring station was equipped with three plastic scintillator gamma-ray detectors. Each station was designed to alarm if 
any two detectors exceeded the trip point of -36 mR/h. 
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had been conjectured, was solidified (-2 g/cm 3 ) crust 
containing uranium. This crust was dissolved directly 
in the vessels again using nitric acid. The uranyl nitrate 
solutions that were produced were transferred to 
favorable geometry vessels and placed in storage. A 
second y-scanning of the vessels on 29 May confirmed 
that as much of the deposits as practical had been 
removed. The total mass of uranium recovered was 
-24.4 kg at an average enrichment of 70% by weight. 

To determine the actual thickness of the receiver 
vessels, a large device capable of measuring the 
distance between two opposite, external surface points 
with a margin of error of -3% was constructed. A 
complete characterization of the thickness of both 
receiver vessels was then generated. At several points, 
the internal thickness was determined to be 132 mm, 
i.e., -32% greater than the design thickness. On the 
average, the internal thickness in the region of the 
deposits was -17% greater than the design thickness, 
or about 117 mm, a factor that clearly reduced the 
criticality safety margin. The location of the solid crust 
was closely correlated with the deformed regions. 

Before the first excursion, uranium was present in 
both receiver vessels in three forms, the solid crust, the 
unknown density U0 2 particle slurry, and the low 
concentration solution. Transfer of etching solutions 
into and out of the receiver vessels occurred up to 
300 times a year. The crust and slurry that consisted of 
a mixture of uranium dioxide, aluminum hydroxide, 
and other particulates had accumulated gradually over 
many years. This, coupled with the deformation of the 
vessels, ultimately resulted in the criticality accident. 

The dynamics of the excursions were estimated by 
analyzing the response of the various alarm system 
detectors and by analysis of the 140 La and 235 U in 


samples of the U0 2 particles taken on 20 May. The 
detectors were located at 12 monitoring stations. 
However, during the excursions, at most only three of 
the monitoring stations alarmed, indicating very low 
peak power for each excursion. These three stations 
were located on the ground, first, and second floors 
directly above one another. From the central control 
room, health physicists documented the sequence of 
excursions, the response of the detectors, and the 
length of time that the detector alarm threshold 
(36 mR/h) was exceeded (Figure 33). 

Using known distances, the thickness of the floors 
and ceilings, and prompt gamma-ray attenuation 
coefficients for concrete, power doubling times (T 1/2 ) 
and uncompensated excessive reactivity estimates (0) 
for the first three excursions were made. The ratio (f) 
of the total number of fissions to those that occurred in 
the first excursion was also estimated. These results are 
shown in Table 8. 

Positive reactivity was introduced into the system as 
the concentration of the U0 2 slurry increased under 
gravity. After each excursion, the system was driven 
subcritical as radiolytic gas generation decreased the 
density of the system. The absolute value of these 


Table 8. C haracteristics of the F irst Three 
Excursions 



Excursion 


Parameter 

1 2 
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Ti /2 (sec) 
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Figure 33. Sequence of alarms and duration that the radiation levels exceeded the alarm level (36 mR/h). 
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competing reactivity effects proved to decrease with 
each additional excursion. After the fifth excursion, the 
system achieved a quasi-stationary state, which if not 
terminated artificially, could have persisted for an 
indefinite time. 

Based on 140 La activity, the total number of fissions 
in the two receiver vessels was estimated to be 
-5.5 x 10 15 . The number of fissions for each excursion 
were then calculated to be 

• 4.3 xlO 15 , 

• 5.6 xlO 14 , 

• 3.2 x 10 14 , and 

• -10 14 for each of excursions 4 through 6. 


No contamination occurred and doses to personnel 
were insignificant. The collective dose for the closest 
20 people did not exceed 0.4 rem. The equipment was 
not damaged, although the facility remained shutdown 
for about three months. The cause of the deformation 
of the receiver vessels was not known, but it was 
suspected that it occurred gradually over many years. 
The vessels were replaced, and a regular monitoring 
program for both uranium accumulation and vessel 
integrity was instituted. 


22. JCO Fuel Fabrication Plant, 30 September 1999 30 ’ 3132 

Uranyl nitrate solution , U(18.8), in a precipitation vessel; multiple excursions; two fatalities; one significant 
exposure. 


The accident occurred in the Fuel Conversion Test 
Building at the JCO company site in Toki-mura, 
Ibarakin prefecture, Japan. The building housed 
equipment to produce either uranium dioxide powder 
or uranyl nitrate solution from source materials such as 
uranium hexafluoride or U 3 O g . This building was one 
of three on site that was licensed to operate with fissile 
materials. The other two housed large-scale production 
equipment for the conversion of UF 6 to U0 2 for 
commercial light water reactors and handled only 
uranium enriched to 5% or less. The Fuel Conversion 
Test Building was much smaller, and was used only 
infrequently for special projects. It was authorized to 
handle uranium in enrichments up to 20%. At the time 
of the accident, U(18.8) fuel processing was underway, 
with the product intended for the Joyo experimental 
breeder reactor at the Oarai site of the Japan Nuclear 
Cycle Development Institute (JNC). The small size 
(-300 x 500 meters) and inner-city location of the JCO 
Tokai site contributed to a unique aspect of this 
accident; this was the first process criticality accident 
in which measurable exposures occurred to off-site 
personnel (members of the public). 

The operation required the preparation of about 
16.8 kg of U(18.8) as 370 g/1 uranyl nitrate that was to 
be shipped, as solution, offsite for the subsequent 
manufacture of reactor fuel. The process was being 
performed in separate batches to comply with the 
criticality controls. Procedures specified different 
uranium mass limits for different enrichment ranges. 
For the 16 to 20 % range the limit was 2.4 kg uranium. 
A simplified depiction of the main process equipment 
and material flow for preparing and packaging the 


uranyl nitrate, as specified in the license between the 
JCO Company and the federal government, is shown in 
Figure 34-A. 

Three operators had begun the task on 29 Septem¬ 
ber, the day prior to the accident, but were operating 
according to the procedure indicated in Figure 34-B. 
There were basically two deviations from the license- 
authorized procedure that were associated with the 
actual operations. First, the company procedure that 
the operators were to have followed, specified that the 
dissolution step was to be conducted in open, 10-liter, 
stainless steel buckets instead of the dissolution vessel 
indicated. This change was known to have saved about 
one hour in dissolution time. 

The much more serious procedural departure, 
however, was the transfer of the nitrate solution into 
the unfavorable geometry precipitation vessel instead 
of the prescribed, favorable geometry columns. This 
deviation was apparently motivated by the difficulty of 
filling the product containers from the storage col¬ 
umns. The drain cock below the columns was only 
about 10 cm above the floor. The precipitation vessel 
had not only a stirrer to assure a uniform product but 
greatly facilitated the filling of the product containers. 

On 29 September the operators completed the 
dissolution of four, 2.4 kg batches. The solution was 
first transferred to a five liter flask and then hand 
poured through a funnel into the precipitation vessel. 
The precipitation vessel was 450 mm diameter by 
610 mm high with a capacity of about 100 liters. 

Figure 35 is a photograph of the actual precipitation 
vessel, interconnected piping, ports through which 
materials could be added, and the stairs on which one 
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A Authorized Procedure 



B Executed Procedure 



10 t Stainless Steel 5 t Flask 

Bucket 



U0 2 (N0 3 ) 2 


Figure 34. Authorized and executed procedures. 


operator stood to pour the solution. The second 
operator stood on the floor and held the funnel. 
Completion of the four batches concluded the three- 
person team’s work for that day. 

The next day, 30 September, the three operators 
began dissolving the final three batches that would be 
required to complete the job. After transferring batches 
five and six, the pouring of the seventh batch was 
begun around 10:35. Almost at the end of the pour 
(183 g of uranium were recovered from the flask) the 
gamma alarms sounded in this building and in the two 
nearby commercial fuel buildings. Workers evacuated 
from all buildings according to prescribed plans and 
proceeded to the muster area on site. At this location, 
gamma ray dose rates far above background were 
detected and it was suspected that a criticality accident 
had occurred and was ongoing. 

The muster location was then moved to a more 
remote part of the plant site where dose rates were near 
to background values. The excursion continued for 
nearly twenty hours before it was terminated by 
deliberate actions authorized and directed by govern¬ 


ment officials. During this time there were several 
noteworthy aspects of this accident. First, the JCO 
Company was not prepared to respond to a criticality 
accident - the gamma alarms were not part of a 
criticality accident alarm system. In fact, the license 
agreement stated that a criticality accident was not a 
credible event. Thus expertise and neutron detectors 
had to be brought in from nearby nuclear facilities. 
Various monitoring devices at the facility as well as the 
nearby Japan Atomic Energy Research Institute 
(JAERI), recorded the excursion history. These 
showed, after a large initial spike, that the power level 
quasi-stabilized, dropping gradually by about a factor 
of two over the first ~17 hours. 

About 4.5 hours after the start of the accident, 
radiation readings taken at the site boundary nearest to 
a residential house and a commercial establishment 
showed combined neutron and gamma ray dose rates 
of about 5 mSv/hour. At this time the Mayor of Tokai- 
mura recommended that residents living within a 
350 m radius of the JCO plant evacuate to more remote 
locations. After 12 hours, local, Ibaraki-ken, govern- 
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Figure 35. The precipitation vessel in which the process criticality accident occurred. 



























ment authorities, recommended that residents within a 
10 km radius of the plant remain indoors because of 
measurable airborne fission product activity. 

Shortly after midnight, plans were carried out to 
attempt to terminate the excursion. It was decided to 
drain the cooling water from the jacket surrounding the 
lower half of the precipitation vessel in the recognition 
that this might remove sufficient reactivity to cause 
subcriticality. Several teams of three operators each 
were sent, one at a time, to accomplish this job. The 
piping that fed the jacket was accessible from immedi¬ 
ately outside the building, but it was difficult to 
disassemble and the workers were limited to exposures 
of less than 0.1 Sv each. 

When the piping was finally opened at about 17 
hours into the accident, not all the water drained from 
the jacket. This was determined from the various 
monitoring devices that showed a power drop of about 
a factor of four and then a leveling off again, indicating 
that the excursion was not terminated. Complete 
removal of the water from the jacket was eventually 
accomplished by forcing argon gas through the piping, 
again, without entering the building. This led to the 
shutdown of the reaction at about twenty hours. To 
assure permanent subcriticality, boric acid was added 
to the precipitation vessel through a long rubber hose. 

A few weeks after the accident, allowing for 
radiation levels to decay, the solution was sampled 
from the vessel and analyzed. Based on fission product 
analysis, it was determined that the total yield of the 
accident was about 2.5 x 10 18 fissions. While there 
were no radiation detectors that recorded the details of 
the first few minutes of the excursion history, the 
operators’ exposures and the neutron detector readings 
at the JAERI-NAKA site provide strong evidence that 
the reactivity exceeded prompt critical. Experimental 
results from simulated criticality accidents in 
solutions 2,3 ’ 4 would then support a first spike yield of 4 
to 8 x 10 16 fissions. 


The two workers involved in the actual pouring 
operation were severely overexposed, with estimated 
doses of 16 to 20 and 6 to 10 GyEq respectively. The 
third operator was a few meters away at a desk when 
the accident occurred and received an estimated 1 to 
4.5 GyEq dose. All three operators were placed under 
special medical care. The operator standing on the 
floor holding the funnel at the time of the accident died 
82 days later. The operator pouring the solution into 
the funnel died 210 days after the accident. The least 
exposed operator left the hospital almost three months 
after the accident. 

Factors contributing to the accident, in addition to 
the stated procedural violations, likely included: 

1) a weak understanding by personnel at all levels in 
JCO of the factors that influence criticality in a 
general sense, and specifically, a lack of realiza¬ 
tion that the 45 liters of solution, while far sub- 
critical in the intended storage tanks, could be 
supercritical in the unfavorable geometry precipi¬ 
tation vessel; 

2) company pressures to operate more efficiently; 

3) the mind-set at all levels within JCO and the 
regulatory authority that a criticality accident was 
not a credible event; this mind-set resulted in an 
inadequate review of procedures, plans, equip¬ 
ment layout, human factors, etc. by both the com¬ 
pany and the licensing officials. 

The Government decided to cancel the license of 
JCO operations, and the JCO was likely to accept the 
decision at the time of the printing of this report. 

Of the approximately 200 residents who were 
evacuated from within the 350 m radius, about 90% 
received doses less than 5 mSv and, of the remaining, 
none received more than 25 mSv. While there was 
measurable contamination from airborne fission 
products on local plant life, maximum readings were 
less than 0.01 mSv/hr and short-lived. 
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B. PHYSICAL AND NEUTRONIC CHARACTERISTICS FOR THE PROCESS FACILITY CRITICALITY 
ACCIDENTS 


In this section, we examine the physical and 
neutronic characteristics of criticality accidents that 
have occurred in nuclear processing facilities of the 
Russian Federation, the United States, the United 
Kingdom, and Japan. To assess the validity of the 
accident descriptions, we have compared the physical 
parameters reported for each accident to the experi¬ 
mentally known conditions for criticality. 

Accident Reconstruction 

The geometry and material specifications provided 
in accident documentation fall far short of qualifying 
as criticality benchmarks as accepted by the interna¬ 
tional criticality safety community. 33 The ability to 
accurately reconstruct accident configurations is 
seriously limited by the lack of reported technical 
detail. For example, in the case of accident 21, these 
limitations are so severe that a re-construction was not 
even attempted. Re-constructions for accidents 1 
through 20 and 22 are provided using interpretations of 
conditions reported for the accident. The re-construc¬ 
tions are intended to estimate the accident configura¬ 
tion corresponding to the critical state. The estimates 
of the parameters necessary for these re-constructions 
should not be interpreted as new “facts” to be added 
into the documentation of the accidents. 

Only primary parameters affecting criticality are 
considered in our estimates-fissile species ( 235 U or 
239 Pu), fissile density, shape of fissile material, and 
degree of moderation. Uranium enrichment is also 
considered in the case of accidents 9, 15, and 22. 
Examples of parameters missing in the accident re¬ 
constructions or ignored as being of secondary 
importance include the vessel material, the vessel wall 
thickness, the presence of fissile nuclides other than 
235 U and 239 Pu, and the presence of external reflectors 
near or in contact with the fissile material. The material 
mixtures were modeled as homogeneous metal-water 
mixtures, from which the degree of moderation is 
implied. This was a known over-simplification for a 
few of the accidents (2, 9, 15, and 21) are known to 
have had a heterogeneous distribution. 

Table 9 presents estimated parameter values for 22 
process facility accidents. To the best of our knowl¬ 
edge, these 22 accidents represent a complete listing of 
events that unambiguously qualify as process facilities 
accidents in the R. F., the U.S., the U.K., and Japan. 

Some explanation of the column headings presented 
in Table 9 is necessary. 


Accident number: The 22 accidents are numbered 
in chronological order. Chronological order was 
selected in recognition of the parallel historical time 
line of technological developments occurring in the 
four countries. 

Site and Date: Short abbreviations for the country 
in which the accident took place are used: R.F., U.S., 
and U.K. for those that occurred in the Russian 
Federation, the United States and the United Kingdom, 
respectively. The accident date is provided in the 
day-month-year format. 

Geometry 

Vessel Shape: The vessel shape, e.g., cylindrical, 
vertical axis. Although this designation is accurate for 
most accidents, some accidents are known to have 
occurred when the axis of cylindrical symmetry was 
neither vertical nor horizontal, but rather tilted at some 
angle from the vertical. 

Vessel Volume: Vessel volume denotes the total 
volume of the vessel. 

Fissile Volume: This heading could be more 
properly described as fissile material volume. It is an 
estimate of the volume occupied by the fissile material 
that dominated the neutronic reactivity of the system. 

In some cases (accidents 5 and 18), fissile material was 
present in low concentration exterior to this volume. 
This additional material had a secondary impact on the 
system reactivity and was therefore ignored. For those 
accidents that occurred or were modeled with a vertical 
axis of cylindrical symmetry and the fissile material 
was in solution or slurry form, an additional parameter, 
h/D, is provided. In those cases the fissile material was 
modeled as a right-circular cylinder (lower case h 
designates the height of the cylinder and capital D 
designates the diameter of the vessel). 

Shape Factor: The shape factor was used to convert 
actual shape to equivalent spherical shape as a method 
to compare these 21 accidents in terms of geometri¬ 
cally equivalent spherical systems. 

For the 18 accidents where h/D is specified, the 
unreflected curve in Figure 36 34 was used to determine 
the shape factor. The curve in Figure 36 is based 
directly on experimental results minimizing depen¬ 
dence on calculations. For the remaining 3 accidents 
(numbers 2, 6, and 20), buckling or other mathemati¬ 
cally simple approximations were used to estimate the 
shape factor. 
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Table 9. Reconstruction of Accident Geometry and Material Configurations 



ACCIDENT 


GEOMETRY 


MATERIAL 

Estimated 

No. 

Site and Date 

Vessel Shape 

Vessel 

Volume 

(£) 

Fissile 

Volume 

(£) 

Shape 

Factor 

Fissile Mass 
(kg) 

Fissile 

Density 

(g/^) 

Spherical 
Critical Mass 
(kg) 

1 

Mayak (R.F.) 
15-03-53 

cylindrical 
vertical axis 

40.0 

31.0 

1.2 

h/D = 0.62 

0.81 239 Pu 

26.1 

0.67 

2 

Mayak (R.F.) 
21-04-57 

cylindrical 
horizontal axis 

100.0 

30.0 

2.8 

3.06 235 U 

102.0 

1.09 

3 

Mayak (R.F.) 
02-01-58 

cylindrical 
vertical axis 

442.0 

58.4 

4.2 

h/D = 0.18 

22.0 235 U 

376.7 

5.24 

4 

Y-12 (U.S.) 
16-06-58 

cylindrical 
vertical axis 

208.0 

56.0 

1.4 

h/D = 0.42 

2.10 235 U 

37.5 

1.50 

5 

LASL (U.S.) 
30-12-58 

cylindrical 
vertical axis 

982.0 

160.0 

3.5 

h/D = 0.20 

2.94 239 Pu 

18.4 

0.84 

6 

ICPP (U.S.) 
16-10-59 

cylindrical 
horizontal axis 

18,900.0 

800.0 

25.0 

30.9 235 U 

38.6 

1.24 

7 

Mayak (R.F.) 
05-12-60 

cylindrical 
vertical axis 

40.0 

19.0 

1.2 

h/D = 0.55 

0.85 239 Pu 

44.7 

0.71 

8 

ICPP (U.S.) 
25-01-61 

cylindrical 
vertical axis 

461.0 

40.0 

2.9 

h/D = 0.22 

7.20 235 U 

180.0 

2.48 

9 

Tomsk (R.F.) 
14-07-61 

cylindrical 
vertical axis 

65.0 

42.9 

1.3 

h/D = 0.47 

1.68 235 U 
H/ 235 U~600 

39.2 

1.29 

(0.9 refl) 

10 

Hanford (U.S.) 
07-04-62 

cylindrical 
vertical axis 

69.0 

45.0 

1.2 

h/D = 0.60 

1.29 239 Pu 

28.7 

1.07 

11 

Mayak (R.F.) 
07-09-62 

cylindrical 
vertical axis 

100.0 

80.0 

1.2 

h/D = 1.11 

1.26 239 Pu 

15.8 

1.05 

12 

Tomsk (R.F.) 
30-01-63 

cylindrical 
vertical axis 

49.9 

35.5 

1.1 

h/D = 0.62 

2.27 235 U 

63.9 

2.06 

13 

Tomsk (R.F.) 
02-12-63 

cylindrical 
vertical axis 

100.0 

64.8 

1.4 

h/D = 0.47 

1.9 3 235 U 

29.8 

1.38 

14 

Wood River (U.S.) 
24-07-64 

cylindrical 
vertical axis 

103.7 

41.0 

1.2 

h/D = 0.54 

2.07 235 U 

50.5 

1.72 

15 

Electrostal (R.F.) 
03-11-65 

cylindrical 
vertical axis 

300.0 

100.0 

1.4 

h/D = 0.46 

3.65 235 U 
H/ 235 U -600 

36.5 

2.61 

(1.6 refl) 

16 

Mayak (R.F.) 
16-12-65 

cylindrical 
vertical axis 

100.0 

28.6 

1.2 

h/D = 0.60 

1.9 8 235 U 

69.2 

1.65 

17 

Mayak (R.F.) 
10-12-68 

cylindrical 
vertical axis 

62.1 

28.8 

1.1 

h/D = 0.70 

1.50 239 Pu 

52.1 

1.36 

18 

Windscale (U.K.) 
24-08-70 

cylindrical 
vertical axis 

156.0 

40.0 

3.0 

h/D = 0.22 

2.07 239 Pu 

51.8 

0.69 

19 

ICPP (U.S.) 
17-10-78 

cylindrical 
vertical axis 

315.5 

315.5 

1.4 

h/D = 1.75 

6.08 235 U 

19.3 

4.34 

20 

Tomsk (R.F.) 
13-12-78 

cylindrical 
vertical axis 

3.2 

0.54 

1.1 

10.1 239 Pu 

18,700.0 

9.18 

21 

Novosibirsk (R.F.) 
15-05-97 

parallel tanks 

700.0 
each tank 

* 

* 

17.1 235 U 

* 

* 

22 

Tokai-mura (Japan) 
30-09-99 

cylindrical 
vertical axis 

100.0 

45.0 

1.1 

h/D = 0.6 

3.12 235 U 
H/ 235 U -380 

69.3 

2.9 

(1.9 refl) 

* System description was 

not adequate to estimate parameter. 
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Material 

Fissile Mass: Fissile mass is the mass of either 235 U 
or 239 Pu. Fissile type is designated below the mass 
entry. Three uranium accidents, 9, 15, and 22 had 
enrichments of 22.6%, 6.5%, and 18.8% by weight, 
respectively. For these accidents the fissile mass 
column also provides the hydrogen to 235 U atom ratio. 
For the plutonium eight accidents with the plutonium 
was assumed to be 95% 239 Pu by weight. 

Fissile Density: Fissile density is the quotient of 
fissile mass and fissile volume assuming a homoge¬ 
neous mixture. 

Estimated Spherical Critical Mass: Entries in this 
column represent the spherical critical mass as the 
quotient of fissile mass and shape factor. These 
estimated masses are used as the measure of consis¬ 
tency or agreement of the accident re-constructions 
with established conditions for criticality. For acci¬ 
dents 9, 15, and 22, the spherical mass was adjusted to 
a fully water reflected value. 


Discussion 

Traditionally, techniques of the type used to 
generate the estimates presented in Table 9 have been 
referred to as “back-of-the-envelope” calculations. 
These calculations are characterized by their math¬ 
ematical simplicity and their results are better de¬ 
scribed as estimates when contrasted to results from 
computer calculations. In some cases these estimates 
are sufficient and more elaborate computer code 
calculations are not necessary. These results are 
characterized as estimates in conformity with 
Wheeler’s First Moral Principle: “Never make a 
calculation until you know the answer. Make an 
estimate before every calculation....” 36 

Figures 37, 38, and 39 are selected and adapted 
from Los Alamos report LA-10860. 34 These three 
figures include points corresponding to fissile density 
(or atom ratio) and the estimated spherical critical 
mass for the twenty-one accident re-constructions in 
Table 9. Figure 38 includes curves for systems with 
uranium enrichment corresponding 
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Figure 36. The ratio of cylindrical to spherical critical masses of U(93)0 2 F 2 solutions, unreflected and with water 
reflector, as a function of cylinder height to cylinder diameter ratio. 
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to 2.0, 3.0, 5.0, 30.3, and 93.0. Accidents 9, 15, and 22 
are superimposed on this figure. Since the curves in 
Figure 38 are for water reflected systems, these points 
have been adjusted downward since the actual acci¬ 
dents were relatively unreflected. 

Additional adjustments to fissile density and 
estimated critical spherical mass could be performed. 
For example, the effects of nitrate absorption and 
organic versus aqueous base composition could be 
included in the estimates. Of course, judgment is 
required as to whether such adjustments are meaning¬ 
ful and whether carrying out such adjustments would 
lead to estimates in closer agreement with the curves 
presented in Figures 37, 38, and 39. Such adjustments 
cannot be justified. The absence of technical detail 
provided in the accident descriptions prevents mean¬ 
ingful refinement of the estimates. This lack of 
technical information also precludes any attempt for 
meaningful, more detailed, neutronic computer 
modeling. 


Conclusions 

Considering the effects of partial reflection and 
inherent uncertainties in the estimates, it is judged that 
the position of 18 of the 21 points plotted in Figures 37, 
38, and 39 are sufficient for establishing credible 
agreement between the reported accident conditions and 
known conditions for criticality. The estimates for 
accidents 1, 7, and 9 appear to be somewhat questionable 
in that more mass than reported in the accident would be 
required for criticality under the hypothesized unreflected 
accident conditions. However, accidents 1 and 7, would 
be in reasonable agreement if the partial reflection 
present during the accident were taken into account. It 
should be noted that for these two cases, the “missing” 
mass is no greater in magnitude than other accident re¬ 
constructions (notably, accidents 12, 14, and 17) in which 
the reported mass exceeds the known conditions for 
criticality. The discrepancy surrounding accident 9 is also 
consistent with the large reported uncertainty in the 
amount of mass present. No systematic features are 
distinguishable that differentiate the R.F., U.S., U.K., and 
Japanese accidents. 



Figure 37. Critical masses of homogeneous water moderated U(93.2) spheres. Solution data appear unless indicated 
otherwise. The accidents are shown by numbered circles. 
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H/ 235 U Atomic Ratio 


Figure 38. Critical masses of water-reflected spheres of hydrogen-moderated U(93), 11(30.3), 11(5.00), 11(3.00), and 
U(2.00).The accidents are shown by numbered circles. 


Fission Yields 

Table 10 lists the estimated fission energy releases 
for the 22 accidents. An attempt has been made to 
categorize the spike yield in this edition in a manner 
consistent with the prior two editions of this report and 
definitions in the appendix. These definitions are 
repeated here for convenience. 

spike (in a prompt power excursion): The initial 
power pulse of a prompt power excursion, limited by 
the shutdown mechanism. See excursion, prompt 
power. 

excursion, prompt power: A nuclear excursion as 
the result of a prompt critical configuration of fissile 
material. In general, a sharp power spike followed by a 
plateau that may be interrupted by smaller spikes. 

From solution excursion experimental data, such as 
many of the CRAC 4 and SILENE 3 experiments, it is 
apparent that there is a smooth transition from excur¬ 
sions in which the maximum reactivity did not reach 
prompt critical to those in which it slightly exceeded 
prompt critical. There is no significant distinction 


between the power histories of two excursions, one 
having a maximum reactivity of $0.90 and the other 
having a maximum reactivity of $1.10. They both 
exhibit an initial spike followed by less energetic, 
recurring spikes at approximately 10 to 20 second 
intervals, eventually leading to a quasi-plateau. Only 
when the maximum reactivity attained is about $0.50 
or less is the traditional spike not present. 

Another result of the CRAC 4 and SILENE 3 experi¬ 
ments that can be compared to the accident yields 
listed in Table 10 is the specific yield of the first 
excursion, the spike. For experiments with a maximum 
reactivity of about $0.50 or more, the specific yield of 
the spike was always about 1.0 x 10 15 fissions per liter 
except for very fast excursions, those that achieved 
inverse periods much greater than 100 s -1 . For these 
very fast excursions, specific yields up to several times 
10 15 fissions per liter were measured. The accidents for 
which a spike yield is given in Table 10 are consistent 
with the specific yields of the CRAC 4 and SILENE 3 
data in that none exceeded a few times 10 15 fissions 
per liter. However, there are three reported spike yields 


61 




12 


O) 

c/) 

c/) 

03 


03 

o 


o 


03 

o 


Q_ 

GO 


3 

CL 





1 

1 





























i 

i 




T 

1 

































1 

_!_ 





























\ 1 




1 

1 




















/ 









\ ! 




1 

1 




















/ Wat 

er 

:ted 








\i 




1 

1 


















! 


Refle< 








i 

c 




1 

1 

1 
















/ 













i 

i 

i 




T 

1 

1 

1 

1 







n 

L 

n 

Jn 

J 

r< 

r 

3f 

lected 

_/ 



E 

a 














i 

i 

i 

i 

i 




1 

1 

1 

1 

1 

1 


1 












/ 















i 

i 

i 

i 

i 

i 




1 

1 

1 

1 

1 

1 

1 

1 

1 

1 


\ 


1 A 

A 






1 


5 L 

□ L 

2 

* fr 

)ata 

)ata 

B9R L 

om 

frr 

D 

IV 

Pc 

DIT 

er 

let 

)ly 

V 

ve 

al 

st\ 

Me 

d 

-\ 

/r 

it( 

f 

N 

er 

3r Reflecte 

om Water 

ater Mixtur 
ie Compa 

d Sph 

Reflec 

es 

Dt Date 

eres 

Dted 

Cyl 

inc 

ler 

s 



i 

i 

i 

i 

i 

i 

i 

i 

i 

i 




1 


1 

S—< 

W' 







7 


7 Unreflected Sphere Data 

zv 239 Pu Metal-Water Mixtures 

i 




1 


. © 






, 


J 

J 


-1 

i 




w* 

1 





w 

5 


n 





^ fr 

om 

Sc 

)lu 

tic 

)n 

[ 

)ata 









i 

i 




1 

1 



s 

EE 

% 

i 

/ 

l 





















i 

i 




1 

1 

1 



N 


n 

l 























i 

i 

i 




1 


i ■ ■+■ 

i i 


+w 















nDh 


D 





i 

1 _Wl 

-Lw-1- 1—III! 

-1 — 1 1 1 1 1 1 1-! 


0.005 0.01 0.1 1 10 20 


Density of Pu (kg/f) 

Figure 39. Critcial masses of homogeneous water moderated plutonium spheres. The points suggesting an 
intermediate curve apply to water reflected Pu(No 3 ) 4 solution with 1 N HN0 3 and 3.1% 240 Pu content. The accidents 
are shown by numbered circles. 


(Accidents 4, 6, and 8) that fall significantly below 
10 15 fissions per liter. This indicates either a slow 
excursion, in which there is not a spike in the classic 
sense, or simply a yield estimation that was incorrect. 
There being no compelling evidence for either case, 
these table entries have been left as they were reported 
in the prior editions. 

About half of the accidents listed in Table 10 
indicate that there was no spike yield. This should be 
interpreted as indicating a slow excursion, i.e., one 


with a time duration of minutes or longer between 
power peaks. This definition of slow is consistent with 
an inverse period of 10 ms -1 or less. Note that 
accident 20 was a metal system. While there are no 
plutonium metal experiments to provide a basis for 
comparison, the two Los Alamos critical experiment 
accidents with plutonium metal (1945 and 1946) 
exhibit similar specific spike yields. 
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Table 10. Accident Fission Energy Releases 


First Spike Yield Fissile Volume Specific Spike Yield Total Yield 


No. 

Site and Date 

i— » 

o 

i-> 

& 

U) 

(10 15 fiss U) 

(10 17 fiss) 

1 

Mayak (R.F.) 
15-03-53 

unknown 

31.0 

unknown 

-2.0 

2 

Mayak (R.F.) 
21-04-57 

unknown 

30.0 

unknown 

-1.0 

3 

Mayak (R.F.) 
02-01-58 

-2.0 

58.4 

3.4 

-2.0 

4 

Y-12 (U.S.) 
16-06-58 

-0.1 

56.0 

0.2 

13.0 

5 

LASL (U.S.) 
30-12-58 

1.5 

160.0 

0.94 

1.5 

6 

ICPP (U.S.) 
16-10-59 

-1.0 

800.0 

-0.1 

400.0 

7 

Mayak (R.F.) 
05-12-60 

unknown 

19.0 

unknown 

-2.5 

8 

ICPP (U.S.) 
25-01-61 

~0.6 

40.0 

1.5 

6.0 

9 

Tomsk (R.F.) 
14-07-61 

none 

42.9 

none 

0.12 

10 

Hanford (U.S.) 
07-04-62 

-0.1 

45.0 

0.2 

8.0 

11 

Mayak (R.F.) 
07-09-62 

none 

80.0 

none 

-2.0 

12 

Tomsk (R.F.) 
30-01-63 

unknown 

35.5 

unknown 

7.9 

13 

Tomsk (R.F.) 
02-12-63 

none 

64.8 

none 

0.16 

14 

Wood River (U.S.) 
24-07-64 

-1.0 

41.0 

2.4 

-1.3 

15 

Electrostal (R.F.) 
03-11-65 

none 

100.0 

none 

-0.08 

16 

Mayak (R.F.) 
16-12-65 

none 

28.6 

none 

-5.5 

17 

Mayak (R.F.) 
10-12-68 

0.3 

28.8 

1.0 

-1.3 

18 

Windscale (R.F.) 
24-08-70 

none 

40.0 

none 

0.01 

19 

ICPP (U.S.) 
17-10-78 

unknown 

315.5 

unknown 

27.0 

20 

Tomsk (R.F.) 
13-12-78 

0.03 

0.54 

5.6 

0.03 

21 

Novosibirsk (R.F.) 
15-05-97 

none 

* 

none 

0.055 

22 

Tokai-mura (Japan) 
30-09-99 

-0.5 

45.0 

1.1 

25 


* System description was not adequate to estimate parameter. 
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C. OBSERVATIONS AND LESSONS LEARNED FROM PROCESS CRITICALITY ACCIDENTS 


There have now been 22 reported accidents in fissile 
material process operations. Significant, and often 
painful, lessons have been learned from these acci¬ 
dents. These lessons are associated with the following 
design, managerial, and operational attributes: commu¬ 
nications; procedures; fissile material accountability 
and accumulation; vessel geometry and volume; 
operator knowledge; new restarted, and one-of-a-kind 
operations; equipment malfunction; and unanticipated 
movement of solutions. This review has also revealed 
the actual magnitude and breadth of accident conse¬ 
quences and the value of criticality alarms. While not 
always readily apparent or emphasized during accident 
investigations, other significant factors that influence 
accident risks are: (1) senior management awareness 
and involvement in safety in general and criticality 
safety in specific; (2) regulatory agency personnel 
awareness and involvement; and (3) national and 
international consensus standards and regulations that 
are both corporate and governmental. 

It is important to note that there have been no 
accidents that were caused by a single failure. That is, 
there were always multiple causes for each of the 22 
accidents. It is also noteworthy that equipment failure 
or malfunction was either a minor or a non-contribut¬ 
ing factor in all of the accidents. 

That lessons have been learned from past criticality 
accidents is made clear from their time histogram, 
Figure 1. For about the first decade of operations with 
significant* quantities of fissile materials, there was not 
a reported accident. This was likely associated with the 
relatively small scale of individual operations and the 
relatively small amounts of fissile material (almost 
exclusively plutonium and enriched uranium) that was 
available. 

However, between the late 1950s and the middle 
1960s there was about one accident per year in both 
the R.F. and the U.S. During this time there was a very 
large increase in the production of fissile material and 
in the scale of operations at the process sites. Since the 
middle 1960s, the frequency of accidents dropped by a 
factor of about 10, to approximately 1 per 10 years. 
This drop can be attributed to several factors. First 
there were significant lessons learned from the earlier 
accidents such as the need to avoid unfavorable 
geometry vessels. Secondly, there was a significant 
increase in management attention to criticality safety, 
particularly the presence of staff devoted specifically to 
controlling this hazard. These accidents also prompted 


those with criticality and operational responsibilities to 
begin to document critical mass data and operational 
good practices. The first compilations of data began 
appearing in the late fifties, and the first national 
standards in the mid-sixties. 

From a review of all the process accidents, we can 
summarize the findings into two categories: observa¬ 
tions and lessons learned. The former are simply facts 
observed at the time; while the latter are conclusions 
that can be used to provide safety guidance to enhance 
future operations. Both categories are discussed in the 
following sections. 

Observations 

The following are factual observations from the 
22 reported process accidents with some elaboration as 
they may apply to the lessons learned. 

• The accident frequency rose from zero in the first 
decade of operations with significant quantities of 
fissile material to a high of about one per year in 
both the R.F. and the U.S. during the years around 
1960. The frequency then dropped noticeably to 
about one per ten years and has seemingly remained 
there. It has been suggested that in the second de¬ 
cade there was a significant increase in both the 
production of fissile materials and in the scale of 
operations at process sites, without commensurate 
attention to criticality safety. Certainly lessons 
learned from these earlier accidents contributed to 
the later improved record. 

• No accident occurred with fissile material while in 
storage. This should not be surprising considering 
the relative simplicity of this operation and the ease 
of controlling criticality. 

• No accident occurred with fissile material while 
being transported. This should not be surprising 
given both national and international transport regu¬ 
lations. These regulations specify defense in depth 
in criticality safety that goes far beyond what would 
be practical and cost-effective for plant operations. 

• No accident resulted in significant radiation conse¬ 
quences beyond the facility site, either to people or 
to the environment. This reinforces a commonly 
held contention that criticality accidents are similar 
to small, bench-top scale, chemical explosions in 
their personnel and environmental consequences, 
i.e., they are worker safety issues. 


*The term “significant” as used here refers to having sufficient fissile material to sustain a chain reaction. The actual quantity of 
material being processed during the first decade was much less than during subsequent decades. 
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• Accidents in shielded facilities did not result in 
radiation doses in excess of current occupational 
limits or in excess of guidance found in governmen¬ 
tal regulations and in national and international 
standards. In light of this, the appropriateness of 
emergency evacuation procedures for shielded 
facilities should be reevaluated. 

• No accidents were solely attributed to equipment 
failure. 

• No accidents were attributed to faulty calculations 
by the criticality analyst. 

• Many of the accidents occurred during non-routine 
operations. However, the number of accidents is too 
small to draw any strong conclusions. 

• Administrative considerations, rather than the sever¬ 
ity of the accident, seemed to have determined the 
length of facility downtime following an accident. 

• No new physical phenomena were observed. All of 
the accidents can be explained by the current 
knowledge base. 

Lessons Learned 

First and perhaps foremost, the human element was 
not only present but the dominant cause in all of the 
accidents, as will be discussed in several of the lessons. 
Second, and not often apparent, there was an element 
of supervisory, upper-management, and regulatory 
agency responsibility in all of the accidents. Third, and 
this follows naturally from the first two, there were 
multiple causes for every accident. From these 22 
accidents the following lessons have criticality safety 
significance. 

In what follows there is not simply a statement of 
the “lesson”, but supporting elaboration. These 
supporting words were drawn from extensive discus¬ 
sions among the authors and are offered to assist 
operating and criticality staff in a fuller understanding 
of the lesson. 

Lessons of Operational Importance 

• Unfavorable geometry vessels should be avoided 
in areas where high-concentration solutions 
might be present. If unavoidable, they should be 
subjected to strict controls or poisoned as appropri¬ 
ate to the situation. All but one of the accidents 
involved fissile material in solutions or slurries 
(quasi-solutions, but likely heterogeneous and of 
high concentration). From this, one realizes imme¬ 
diately the importance of favorable geometry (lim¬ 
ited dimension), solution handling vessels. When it 
is judged to be necessary to rely on concentration 
control associated with the application of large, un¬ 
poisoned process vessels, then multiple checks on 
incoming concentration and redundant monitoring 
for fissile material accumulation are appropriate, 


particularly in unshielded operations. In addition, 
one must not be lulled into complacency because of 
the near-exclusive use of favorable geometry ves¬ 
sels. This only reduces accident likelihoods, it does 
not eliminate them. Given sufficient interaction, 
multiple favorable geometry vessels can always be 
made critical. Also, failures of favorable geometry 
vessels can result in accidents. The accident at 
Novosibirsk in 1997, is perhaps an example of a 
combination of complacency and vessel failure. 

• Important instructions, information, and proce¬ 
dural changes should always be in writing. Fail¬ 
ure of communications between operating person¬ 
nel was a major contributing factor in several 
accidents. This failure manifested itself in multiple 
ways. In one accident involving shift work, proce¬ 
dures for the recovery from a process upset were 
not documented and not passed on to everyone on a 
subsequent shift; a fatality resulted. Operations 
should be performed only in accordance with well 
written, approved, and understood (by the users) 
procedures, including operating instructions and 
postings. Two accidents were directly attributable to 
miscommunication of sample concentrations during 
telephone transmission of analytical laboratory 
results. Important data should always be transferred 
in writing. A fourth accident occurred when impro¬ 
vised operations were underway and oral instruc¬ 
tions were misunderstood and unintended actions 
taken. 

• The processes should be familiar and well under¬ 
stood so that abnormal conditions can be recog¬ 
nized. Several accidents were associated with in¬ 
complete understanding of abnormal conditions. 
Had these abnormal conditions been recognized, 
then controls could have been put in place to pre¬ 
vent the accidents. While these accidents generally 
occurred in the era before management assigned 
specialists to assist operating personnel in criticality 
accident control, the lesson will always be appli¬ 
cable. 

• Criticality control should be part of an inte¬ 
grated program that includes fissile material 
accountability. All piping and equipment associ¬ 
ated with fissile material operations should be ap¬ 
propriately monitored to prevent undesired fissile 
material accumulations. Loss of or inadequate ac¬ 
countability for fissile materials has been associated 
with several accidents. Sometimes this accountabil¬ 
ity seemed almost unavoidable when the loss was 
so gradual that the accountability controls available 
at the time were not capable of detecting the loss. 
However, had there been monitoring of piping and 
vessels through which fissile material routinely 
passed, or could have credibly passed, then inad¬ 
vertent accumulations could have been detected. 
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Monitoring could take the form of visual inspec¬ 
tions, physical cleanings, radiation emission mea¬ 
surements, etc. Criticality control and fissile mate¬ 
rial accountability are important issues and often 
mutually supportive. 

• Operations personnel should know how to re¬ 
spond to foreseeable equipment malfunctions or 
their own errors. Hasty and inappropriate re¬ 
sponses to process malfunctions have led to more 
than one accident. This underscores several issues: 
first, the need for operator understanding of the 
concept of criticality and of the importance of the 
particular criticality controls for the process at 
hand; second, the importance of care and thorough¬ 
ness in determining credible abnormal conditions 
for analysis; and third, the importance of having 
considered responses to unplanned conditions. 

• Operations personnel should be trained in the 
importance of not taking unapproved actions 
after an initial evacuation. Reentry, except per¬ 
haps in lifesaving situations, should be undertaken 
only after the accident evolution has been techni¬ 
cally evaluated, thoroughly understood, and 
planned actions have been approved. During one 
accident, unapproved reentry into the accident site 
and without adequate understanding of the critical¬ 
ity hazard, followed by impulsive actions, led to a 
loss of life. In a second accident, significant expo¬ 
sures occurred from an ineffective and ill consid¬ 
ered reentry and only chance prevented a fatality. 

• Readouts of radiation levels in areas where acci¬ 
dents may occur should be considered. Knowl¬ 
edge of radiation levels in evacuated areas has 
proved valuable in planning recovery actions. Many 
of the accidents involved power histories that ex¬ 
tended from minutes to many hours. In two cases, 
the accident termination process involved hands on 
intervention at times of expected minimal expo¬ 
sures. The successes of these interventions were 
based on detailed knowledge and understanding of 
the excursion history and its expected behavior. 

• Operations involving both organic and aqueous 
solutions require extra diligence in understand¬ 
ing possible upset conditions if mixing of the 
phases is credible. Obscure process conditions and 
unplanned chemistry have led to at least four acci¬ 
dents. 

• Operations personnel should be made aware of 
criticality hazards and be empowered to imple¬ 
ment a stop work policy. This awareness should 
come from a mix of formal and informal training. 
These include classroom, on-the-job from immedi¬ 
ate supervision, and discussions with criticality 


staff. Lack of understanding of criticality hazards 
has contributed to several accidents and to exacer¬ 
bated consequences. 

• Operating personnel should be trained to under¬ 
stand the basis for and to adhere to the require¬ 
ment for always following procedures. Lack of 
adherence to available procedures, either inadvert¬ 
ently or knowingly, has been a major contributor to 
several accidents. 

• Hardware that is important to criticality control 
but whose failure or malfunction would not nec¬ 
essarily be apparent to operations personnel, 
should be used with caution. Operational over¬ 
sights such as failure to actuate valves per require¬ 
ments have led to accidents. Duplicate hardware 
controls, strict procedural controls with multiple 
checks on operator actions, and diligent mainte¬ 
nance may be appropriate. 

• Criticality alarms and adherence to emergency 
procedures have saved lives and reduced expo¬ 
sures. Most of the 22 accidents involved excursions 
that were not terminated after a single burst. Prompt 
detection and immediate evacuation of personnel 
within several meters of the accident have been 
significant in saving lives and limiting exposures. 

Lessons of Supervisory, Managerial, and 
Regulatory Importance 

• Process supervisors should ensure that the op¬ 
erators under their supervision are knowledge¬ 
able and capable. Several accidents could have 
been avoided or the consequences lessened had 
supervisors been more aware of the routine actions 
of operators in performing their tasks. It is one 
thing to have written procedures that are intended to 
be followed in order to provide for safe operations. 
It is another that these procedures are understood 
and being followed as intended. Supervisors might 
ask themselves periodically, “When was the last 
time I saw the job being performed properly?” 

• Equipment should be designed and configured 
with ease of operation as a key goal. More than 
one accident, including the accident in Japan might 
have been avoided if operators had been provided 
user-friendly equipment. 

• Policies and regulations should encourage self- 
reporting of process upsets and to err on the side 
of learning more, not punishing more. At least 
one accident and attendant fatality were caused by a 
supervisor’s excessive concern for bringing a pro¬ 
cess back within required limits before it was dis¬ 
covered by management. Improvised operations 
were performed without accompanying awareness 
of the criticality hazards. 
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• Senior management should be aware of the haz¬ 
ard of accidental criticality and its consequences. 

Difficult cost-risk-benefit decisions must be made 
by upper management. There will always be issues 
of production quotas and timetables, which man¬ 
agement must balance against acceptable levels of 
risk acceptance. Most of the accidents occurred 
during the peak years of the Cold War, when high 
production levels were perceived to be of utmost 
importance. Nevertheless, senior management ap¬ 
parently learned from these accidents and allocated 
resources for criticality control. The three major 
expenditures were for criticality specialists dedi¬ 
cated to the support of process operations, favorable 
geometry and poisoned vessels, in spite of their cost 
and production drawbacks, and the generation of 
additional critical mass data. It should be noted that 
before the first criticality accident in the R.F., 
nearly all process vessels were of unfavorable ge¬ 
ometry in order to maximize production; by 1968 
more than 95% of them had been replaced with 
favorable geometry vessels. 

• Regulations should exist which promote safe and 
efficient operations. Those who worked in the 
critical experiment facilities were directly aware of 
the risks associated with criticality accidents. Some 
of these people also recognized the need for formal 
safety guidance to be made available to those who 
operated process facilities. Accordingly, they, to¬ 
gether with process experts, spontaneously set out 
to develop and document criticality safety guidance 
for process operations. In the U.S., technical guid¬ 
ance and administrative good practices were codi¬ 
fied in a series of documents entitled Nuclear Safety 
Guide , beginning with the 1957 edition. 36 Many of 
these same people then became involved in the 
development of American national standards and 
then international standards. Similar actions devel¬ 
oped in parallel in other countries, both those that 
had experienced criticality accidents and those that 
had managed to work with fissile materials without 
accidents. The marked decrease in the accident rate 
by the late 1960s was probably due to a combina¬ 


tion of adherence to these newly codified regula¬ 
tions and guidance and upper management attention 
to this new hazard. 

• Regulators, like process supervisors, should 
ensure that those they regulate are knowledge¬ 
able and capable. While the responsibility for 
accident prevention must rest first and foremost 
with those directly in charge of the work, regulatory 
authorities have a distinct role to play. Similar to the 
process supervisor, the regulator should also ask 
questions such as: “When was the last time that I 
saw the job being performed properly?” and 
“When was the last time I talked to the process 
supervisors and became assured that they under¬ 
stood the operations under their control and exhib¬ 
ited a safety conscious behavior and attitude?” At 
the time of the Wood River Junction accident, 

131 days after plant startup, there still had not been 
a visit by the regulatory authorities. At the time of 
the 1997 accident, regulatory authorities were not 
aware of changed criticality limits of the operation 
even though the change had been made 13 years 
before. 

Conclusions 

Criticality accident risks will not vanish as long as 
significant quantities of fissile materials exist. How¬ 
ever, sufficient knowledge has been gained from 
planned experiments and from accidents to provide a 
high degree of confidence that, with appropriate 
support from senior management, reasonable diligence 
on the part of criticality staff and operating personnel, 
and continued adherence to codified fundamental 
safety principles and guidance, accident likelihoods 
can be maintained at the current low level or possibly 
be reduced even further. This will require continued 
education of future personnel at all levels—regulatory, 
upper management, supervisory, criticality staff, and 
operations—on the lessons of the past so that similar 
accidents will not be repeated. 

The following statement, while woven throughout 
the preceding text is considered worthy of being 
repeated: All accidents have been dominated by 
design, managerial, and operational failures. The 
focus for accident prevention should be on these 
issues. 
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II. REACTOR AND CRITICAL EXPERIMENT ACCIDENTS 


This section brings out errors that should be avoided 
in the conduct of reactor experiments and critical 
experiments. Because criticality is expected, lessons 
learned from this section do not contribute directly to 
the discipline of process criticality safety. Of the 38 
accidents studied, 5 occurred in what must be catego¬ 
rized as working reactors (the water boiler, Godiva, 
Dragon, SL-1, and NRX) and 33 occurred in critical 
facilities where the properties of the assemblies 
themselves were being investigated. 

The major change to Part II of this second revision 
is the inclusion of six accidents that occurred in the 
Russian Federation. Four of these involved small 
uranium or plutonium metal assemblies; two occurred 
with assemblies involving reactor core mockups. 


One minor change in this section is the deletion of 
what was listed in the prior editions as II-D.2 The 
U.S.S.R, 1953 or 1954. Based on research of the listed 
reference and discussions with Russian experts, it has 
been concluded that the reference was not to a reactor 
accident but to some other source of personnel 
radiation exposure. 

Some of the reactor and critical experiment accident 
data are summarized in Table 11. Where possible and 
appropriate, the excursion fission energy is divided into 
that which was created in the spike and that which was 
in the plateau. For some excursions, almost all fissions 
were in the plateau; others consisted only of a single 
spike. 


Table 11. Reactor and Critical Experiment Accidents 







Total 

Event 

Date 

Location 

Material 

Geometry 

Damage 

Fissions 

II-A FISSILE SOLUTION SYSTEMS 





1 

12-49 

Los Alamos, NM 

~1 kg 235 U as uranyl 

Sphere, graphite 

None 

~3 x 10 16 




nitrate 

reflected 



2 

16-11-51 

Richland, WA 

1.15 kg Pu as nitrate 

Bare sphere, 93% 
filled 

None 

8 x 10 16 

3 

26-05-54 

Oak Ridge, TN 

18.3 kg 235 U as uranyl 

Cylindrical 

None 

1 x 10 17 




flouride 

annulus, bare 



4 

01-12-56 

Oak Ridge, TN 

27.7 kg 235 U as uranyl 
flouride 

Cylindrical bare 

Minor 

1.6 x 10 17 

5 

30-01-68 

Oak Ridge, TN 

0.95 kg 233 U as nitrate 

Sphere, water 

Local 

1.1 x 10 16 





reflected 

contamination 


II-B BARE AND REFLECTED METAL SYSTEMS 




1 

21-08-45 

Los Alamos, NM 

6.2 kg 8-phase Pu 

Sphere with WC 

None (one 

~1 x 10 16 





reflector 

fatality) 

~3 x 10 15 

2 

21-05-46 

Los Alamos, NM 

6.2 kg 8-phase Pu 

Sphere with Be 

None (one 





reflector 

fatality) 


3 

1-02-51 

Los Alamos, NM 

62.9 kg U(93) metal 

Cylinder and 
annulus in water 

Minor 

~1 x 10 17 

4 

18-04-52 

Los Alamos, NM 

92.4 kg U(93) metal 

Cylinder, 

unreflected 

None 

1.5 x 10 16 

5 

9-04-53 

Sarov, R.F. 

~8 kg 8-phase Pu 

Sphere with 

Major core 

~1 x 10 16 





natural U reflector 

damage 


6 

3-02-54 

Los Alamos, NM 

53 kg U(93) metal 

Sphere, 

unreflected 

Minor 

5.6 x 10 16 

7 

12-02-57 

Los Alamos, NM 

54 kg U(93) metal 

Sphere, 

unreflected 

Severe 

1.2 x 10 17 

8 

17-06-60 

Los Alamos, NM 

~51 kg U(93) metal 

Cylinder with C 
reflector 

Minor 

6 x 10 16 

9 

10-11-61 

Oak Ridge, TN 

~75 kg U(93) metal 

Paraffin reflected 

None 

~1 x 10 16 
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Table 11. Reactor and Critical Experiment Accidents (continued) 


Total 


Event 

Date 

Location 

Material 

Geometry 

Damage 

Fissions 

10 

11-03-63 

Sarov, R.F. 

-17.35 kg 8-phase Pu 

Sphere with LiD 
reflector 

None 

-5 x 10 15 

11 

26-03-63 

Livermore, CA 

47 kg U(93) metal 

Cylinder with Be 
reflector 

Severe 

3.7 x 10 17 

12 

28-05-65 

White Sands, NM 

96 kg U(93)-Mo alloy 

Cylinder, 

unreflected 

Minor 

1.5 x 10 17 

13 

5-04-68 

Chelyabinsk-70, R.F. 

47.7 kg U(90) metal 

Sphere with 

None (two 

6 x 10 16 





natural U reflector 

fatalities) 


14 

6-09-68 

Aberdeen, MD 

123 kg U(93)-Mo alloy 

Cylinder, 

unreflected 

Severe 

6.09 x 10 17 

15 

17-06-97 

Sarov, R.F. 

-44 kg U (90) 

Sphere with 

None (one 

-2 x 10 17 in one 





copper reflector 

fatality) 

burst (total -10 19 ) 

II-C MODERATED METAL AND OXIDE SYSTEMS 




1 

6-06-45 

Los Alamos, NM 

35.4 kg U(79.2) as 

Water reflected 

Minor 

-4 x 10 16 




1/2-inch cubes 

pseudosphere 



2 

-1950 

Chalk River, 

Aluminum-clad natural 

Rods in heavy 

Minor 

Unknown 



Ontario, Canada 

uranium 

water moderator 



3 

2-06-52 

Argonne National 

U(93) oxide in plastic 

Fuel elements in 

Severe 

1.22 x 10 17 



Lab, IL 


water moderator 



4 

12-12-52 

Chalk River, 

Natural uranium fuel 

Heavy water 

Severe 

1.20 x 10 2 ° 



Ontario, Canada 

rods 

moderated reactor 



5 

22-07-54 

National Reactor 

4.16 kg U(93) as U/Al 

Fuel/elements in 

Severe 

4.68 x 10 18 



Testing Station, ID 

alloy. 

water moderator 



6 

15-10-58 

Vinca, Yugoslavia 

Natural uranium rods 

Fuel rods in heavy 

None (one 

-2.6 x 10 18 





water 

fatality) 

3 x 10 18 

7 

15-03-60 

Saclay, France 

2.2 tons U(1.5) as oxide 

Fuel rods in water 

None 

8 

3-01-61 

Idaho Reactor 

U(93) clad in aluminum 

Fuel rods in water 

Severe 

4.4 x 10 18 



Testing Area, ID 



(three 

fatalities) 


9 

5-11-62 

Idaho Reactor 

U(93)/A1 alloy plates, 

Fuel elements in 

Severe 

-1 x 10 18 



Testing Area, ID 

A1 clad 

water 



10 

30-12-65 

Mol, Belgium 

U(7) oxide 

Rods in water/ 
heavy water 

None 

-4 x 10 17 

11 

15-02-71 

Kurchatov Institute 

U(20)O 2 fuel rods 

Be reflected 

None 

2 x 10 19 

12 

26-05-71 

Kurchatov Institute 

U(90)O 2 fuel rods 

Water reflected 

None (two 
fatalities) 

2 x 10 18 

13 

23-09-83 

Buenos Aires, 

MTR type fuel elements 

Pool type reactor 

None (one 

-4 x 10 17 



Argentina 



fatality) 


II-D MISCELLANEOUS SYSTEMS 





1 

11-02-45 

Los Alamos, NM 

Uranium hydride in 

The Dragon 

Minor 

-6 x 10 15 




styrex 

assembly 


-4 x 10 17 

2 

29-11-55 

Argonne National 

Enriched uranium in 

EBR-1 

Severe 



Laboratory, ID 

NaK 




3 

3-07-56 

Los Alamos, NM 

U(93) foils in graphite 

Honeycomb 

None 

3.2 x 10 16 

4 

18-11-58 

Reactor Testing 

Uranium oxide in 

Aircraft engine 

Minor 

2.5 x 10 19 



Area, ID 

nickel-chromium 

prototype 



5 

11-12-62 

Los Alamos, NM 

Large U(93) graphite 

Cylinder plus 

None 

-3 x 10 16 




cylinder 

annular reflector 
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A. FISSILE SOLUTION SYSTEMS 

1. Los Alamos Scientific Laboratory, December 1949 3738 

Water boiler reactor; control rods removed by hand; single excursion; insignificant exposure. 


This accident occurred when two new control rods 
(poisons) were being tested in the water boiler reactor. 
The water boiler was a 12 inch diameter stainless steel 
spherecontaining 13.6 t of uranyl nitrate. In 1949 it 
was reflected by thick graphite. 

The rods had been installed, and the operator was 
manually checking their drop times. After several tests 
of each individual rod (a safe procedure since one rod 
was sufficient to maintain subcriticality) both rods 
were pulled, held for about 5 seconds, and then 
dropped simultaneously. A short time later the rods 
were again pulled and dropped together. 


The removal of the two rods increased the reactivity 
to about 3 cents over prompt criticality, corresponding 
to a period of 0.16 seconds. The power probably rose 
with this period to a very broad peak of 2 or 3 x 10 16 
fissions/s and remained close to this value for about 1.5 
seconds. The excursion was not immediately detected 
because all the instruments were turned off except for a 
direct reading thermometer that showed a temperature 
rise of 25°C, equivalent to a yield of 3 or 4 x 10 16 
fissions. 

The operator received a 2.5 rad dose. The reactor 
was not damaged. 


2. Hanford Works, 16 November 1951 39 

Plutonium solution assembly; cadmium rod removed too rapidly; single excursion; insignificant exposures. 


The critical assembly in which the excursion 
occurred was an aqueous solution of 1.15 kg of 
plutonium in the form of plutonium nitrate contained 
in an unreflected 20 inch diameter aluminum sphere. 
The purpose of the experimental program was to 
determine the critical mass of plutonium for various 
container geometries and solution concentrations. The 
excursion occurred during the approach to criticality, 
when the sphere was 93% full, as a result of withdraw¬ 
ing a remotely controlled, hollow cadmium safety rod 
in a series of steps with insufficient time between 
steps. The excursion yield was 8 x 10 16 fissions, and a 
small amount of fuel was forced through gaskets at the 
top of the reactor assembly. Because the gaskets sealed 
about 18 £ of air above the fuel level before the 
accident, pressures considerably in excess of atmo¬ 
spheric must have existed in the assembly during the 
accident. 


The published data suggest that the reactivity 
insertion rate resulting from the safety rod withdrawal 
must have been about 4.7 $/s, which would lead to a 
fission yield of about twice the observed value if 
known temperatures and void coefficients of reactivity 
are used. In this case, however, the action of the scram 
circuit was sufficiently fast that the cadmium rod most 
probably contributed to the shutdown of the excursion. 
A slight reduction in the assumed reactivity insertion 
rate would lengthen the time, making it even more 
certain that the excursion was stopped by the falling 
poison rod. 

No personnel were injured in this excursion, 
although plutonium nitrate solution contaminated the 
experimental area. The building was successfully 
decontaminated in a few days, but before cleanup of 
the test area was completed, a fire occurred and the 
building was abandoned. 
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3. Oak Ridge National Laboratory, 26 May 1954 40 

Uranium solution assembly, central poison cylinder tilted from proper position; single excursion; insignificant 
exposures. 


The experiment was one of a series in which the 
critical properties of aqueous solutions in annular 
cylindrical containers were being investigated. The 
outer cylinder had a diameter of 10 inches; a cadmium 
clad inner cylinder was 2 inches in diameter. The 
system was unreflected and consisted of 55.4 £ water 
solution of U0 2 F 2 solution that contained 18.3 kg of 
highly enriched uranium (93% 235 U). The excursion 
occurred while the liquid level was at 40 inches and 
more solution was being added slowly to approach a 
delayed critical configuration. The experimental 
situation before and after the accident is illustrated in 
Figure 40. The inner cylinder was essentially a poison 
rod. When it became detached from its connection at 
the top and tipped to the side of the outer container, it 
fell to a less effective position, thus allowing the 
system reactivity to rise well over prompt criticality 
and causing a power excursion of 10 17 fissions. 

The reconstruction of this accident was most 
thorough. The tilting of the inner cylinder added 
reactivity to the system at a rate corresponding to 


3.33 $/s, which continued well into the prompt critical 
region. Using known coefficients and generation times, 
an initial power spike of 5.1 x 10 16 fissions can be 
calculated. Since development of the power spike 
would require only about 0.07 seconds after the system 
reached prompt criticality (0.43 seconds after the 
cylinder began to tip), the cylinder was still tilting. It is 
characteristic of such accidents that after an initial 
spike, the power balances the reactivity insertion rate. 
For this solution, the required power was a few 
megawatts, and it must have been fairly constant until 
the inner cylinder reached its maximum displacement 
0.91 seconds after inception of the transient. At this 
time, the power dropped sharply and when the liquid 
began to drain, the system became far subcritical. 

Because of thick shielding, no one received a 
radiation dose greater than 0.9 rem. Only a few tens of 
cubic centimeters of solution were displaced from the 
cylinder; the area was returned to normal experimental 
use in three days. 




Poison Rod 
(normal) 


Poison Rod 
(detached) 


U0 2 F 2 Solution 


ran 


Figure 40. The Oak Ridge National Laboratory uranium solution assembly showing the normal and detached 
positions of the central poison rod. 
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4. Oak Ridge National Laboratory, 1 February 1956 40 

Uranium solution assembly; wave motion created by falling cadmium sheet; single excursion; insignificant 
exposures. 


In this experiment, certain reactor parameters were 
being investigated by measuring stable reactor periods. 
The system was a cylindrical tank (0.76 m in diameter) 
filled to a depth of 130 mm with 58.9 l of U0 2 F 2 
solution containing 27.7 kg of 235 U. Transfer of 
solution from storage to the test cylinder was achieved 
by applying air pressure to the storage vessel; flow was 
controlled by a remotely operated valve in a one-half 
inch diameter line. With the control switch in the 
“feed” position, the valve was open and air pressure 
was applied; with the switch in the “drain” position, 
the valve was also open, but the air supply was turned 
off and the storage vessels were vented to the atmo¬ 
sphere. When the switch was in the intermediate 
“neutral” position, the valve was closed and the storage 
vessels were vented. 

The situation was one in which the solution volume 
was about 100 mi less than the critical volume. An 
increment of solution was added, and the transient 
period decreased rapidly to approximately 30 seconds, 
where it seemed to remain constant. Shortly thereafter 
the fuel control switch was placed in the drain position 
and the period meter indicated a rapid decrease in 
period so that the safety devices were actuated almost 
simultaneously by both manual and instrument signal; 
the instrument trip point had been set at a 10 second 
period. Immediately thereafter the excursion occurred. 
The yield was 1.6 x 10 17 fissions and, in this case, a 
considerable volume of solution was forcibly ejected 
from the cylinder. Post excursion tests showed that if 
insufficient time were allowed for venting the operat¬ 
ing pressure, addition of solution to the reactor could 
have continued for several seconds after the control 
switch was placed in the drain position. This addition 
of solution accounted for the decrease in period that 


precipitated the scram, but the increment of solution 
could not have added enough reactivity to account for 
the excursion. 

The reactivity of such shallow, large diameter 
assemblies is very sensitive to the solution depth but 
quite insensitive to changes in the diameter. For this 
system, the estimated difference between delayed 
criticality and prompt criticality is only 1 mm of depth. 
If the effective diameter were reduced to 0.50 m, the 
depth would have to be increased only 12 mm to 
maintain delayed criticality. It is thought that the 
falling scram, a cadmium sheet slightly deformed at 
the bottom, set up a wave system that must have 
converged at least once and created a superprompt 
critical geometry. 

In this case, the analysis was directed to finding 
what reactivity insertion rate would cause a power 
spike of the required yield. The analysis was then 
examined to see if it contradicted any known facts. It 
was found that a rate of 94 $/s was adequate to cause a 
spike of 8 ms duration, which would account for the 
observed yield. The maximum excess reactivity would 
be about 2 $ over prompt criticality; the void volume 
could be 12 times that of the Oak Ridge National 
Laboratory 26 May 1954 accident (II-A. 3), thus easily 
accounting for the splashing of the solution. The void 
volume that results as microbubbles (caused by 
disassociation of water by fission fragments) coalesce 
is discussed in Power Excursions and Quenching 
Mechanisms. 

A laborious chemical decontamination of the 
assembly room was required to clean up the ejected 
solution. Slight mechanical damage was evidenced by 
distortion of the bottom of the cylinder. The largest 
radiation dose received was 0.6 rem. 
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5. Oak Ridge National Laboratory, 30 January 1968 41 

233 U solution assembly; reactivity added by air bubble movement; single excursion; insignificant exposures. 


Routine critical experiments were underway to 
determine the critical concentration of an aqueous 
solution of uranyl nitrate in a thin aluminum sphere 
(5.84 i volume) with a thick water reflector. The 
uranium contained 97.6% 233 U at a concentration of 
167 g/ L The solution density was 1.23 kg/ A 

The solution height in the sphere could be adjusted 
through the vertical motion of an external 55 mm 
diameter cylindrical tank. This adjustment tank was 
connected to the sphere by a 13 mm diameter flexible 
line. The system had achieved criticality, and measure¬ 
ments were being taken to determine incremental 
reactivity values. Lowering of the adjustment tank did 
not provide the expected reduction in reactivity. An air 
bubble was visually observed in the line connecting the 
adjustment tank to the sphere. In an attempt to remove 


the bubble, enough solution was drained to the supply 
reservoir to achieve subcriticality. The adjustment tank 
was then moved up and down in an effort to dislodge 
the bubble. The motion was repeated at least twice. At 
a time when no adjustments were knowingly being 
made, the reactivity increased rapidly, all shutdown 
devices functioned, and the radiation alarm sounded. 

It is assumed that motion of the air bubble caused 
the addition of enough solution to the sphere to change 
the system from subcritical to essentially prompt 
critical. The yield of the excursion was determined to 
have been 1.1 x 10 16 fissions. Approximately 90 ml of 
solution was expelled from the tank into the water 
reflector and onto the nearby floor and equipment. The 
modest cleanup required was accomplished promptly. 

Simple modification of the experimental configura¬ 
tion precluded future introductions of air bubbles. 
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B. BARE AND REFLECTED METAL ASSEMBLIES 
1. Los Alamos Scientific Laboratory, 21 August 1945 3744 

Plutonium core reflected with tungsten carbide; single excursion; one fatality , one significant exposure. 


2. Los Alamos Scientific Laboratory, 21 May 1946 3744 

Plutonium core reflected with beryllium; one fatality, seven significant exposures. 


Two accidental excursions occurred with the same 
core and were, in several respects, quite similar. The core 
consisted of two hemispheres of 8-phase plutonium 
coated with 5 mils of nickel. The total core mass was 
6.2 kg; the density was about 15.7 g/cm 3 . 


In the first accident, a critical assembly was being 
created by hand stacking 4.4 kg tungsten carbide bricks 
around the plutonium core. Figure 41 shows a reenact¬ 
ment* of the configuration with about half of the 
tungsten blocks in place. The lone experimenter was 
moving the final brick over the assembly for a total 



Figure 41. Plutonium sphere partially reflected by tungsten-carbide blocks. 


*The Los Alamos National Laboratory archives include some data and comments about a rerun performed 2 October 1945 to 
determine the radiation dose received in the accident of 21 August 1945. The yield of the rerun was about 6 x 10 15 fissions, but 
the prompt critical state was not reached. The maximum reactivity of the system during this experiment was about 60 0 above 
delayed criticality. 
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reflector of 236 kg when he noticed from the nearby 
neutron counters that the addition of this brick would 
make the assembly supercritical. As he withdrew his 
hand, the brick slipped and fell onto the center of the 
assembly, adding sufficient reflection to make the 
system superprompt critical. A power excursion oc¬ 
curred. He quickly pushed off the final brick and 
proceeded to unstack the assembly. His dose was 
estimated as 510 rem from a yield of 10 16 fissions. He 
died 28 days later. 

An Army guard assigned to the building, but not 
helping with the experiment, received a radiation dose of 
approximately 50 rem. The nickel canning on the 
plutonium core did not rupture. 

In the second accident, the techniques involved in 
creating a metal critical assembly were being demon¬ 
strated to several people. The system consisted of the 
same plutonium sphere reflected, in this case, by 
beryllium. The top and final hemispherical beryllium 
shell was being slowly lowered into place; one edge was 
touching the lower beryllium hemisphere while the edge 
180° away was resting on the tip of a screwdriver 


(Figure 42). The person conducting the demonstration 
was holding the top shell with his left thumb placed in an 
opening at the polar point. 

The yield of this excursion was 3 x 10 15 fissions; 
again, there was no rupture of the nickel canning. The 
eight people in the room received doses of about 2100, 
360, 250, 160, 110, 65, 47, and 37 rem. The man who 
performed the experiment died nine days later. 

The results of fission rate calculations in this sphere, 
as a function of time for several values of excess 
reactivity, are shown in Figure 43. Figure 44 represents 
the total number of fissions to be expected as a function 
of time for the same excess reactivities. These data are 
applicable to both accidents because the difference in 
reflector material has only a small effect on the neutron 
kinetics. In the first excursion, if the excess reactivity did 
not exceed 15 0, the assembly must have been together 
for several seconds, which is not unreasonable. In the 
second event, the experimenter was better prepared to 
disassemble the material, and it is thought that this was 
done in a fraction of a second, perhaps <1/2 second. The 
known parameters would then be satisfied by an excess 
reactivity of about 10 0. 



Figure 42. Configuration of beryllium reflector shells prior to the accident 21 May 1946. 
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3. Los Alamos Scientific Laboratory, 1 February 1951 42 > 4345 

Critical separation experiment , two large 235 U metal masses in water; multiple excursions; insignificant 
exposures. 


A water reflected system was set up in 1949 to 
obtain the neutron multiplication of a single unit of 
fissile metal in water. The system had two scram 
devices. The first, with a quick response, consisted of a 
pneumatic cylinder that raised the unit out of the water; 
the second, a slower device, was the draining of the 
tank. Later, a traveling support was added so that 
critical separation distances between two units could 
be determined; a dropping cadmium screen provided 
an additional scram (Figure 45). 

The excursion was precipitated by an experiment 
that measured the critical separation distance of two 
enriched uranium masses (each of 93.5% 235 U) in 
water: one, a solid cylinder of 24.4 kg and the other, a 
hollow cylinder of 38.5 kg. Sheet cadmium 10 mils 
thick was fastened to the outer surface of the solid 
cylinder and to the inside surface of the hollow 
cylinder. A paraffin slug filled the cavity in the hollow 
cylinder. 

At the completion of the critical separation experi¬ 
ment (at a multiplication of 65.5), the assembly was 
scrammed. The water started draining, the cadmium 
screen dropped, the solid cylinder (left-hand body in 
Figure 45) was lifting, and an excursion (later deter¬ 


mined to be 10 17 fissions) was made evident by the 
jamming of neutron counters and the appearance on 
television of a vapor cloud above the water. 

Later reconstruction of the accident showed that the 
pneumatic tangential scram was the first to be effective 
and led directly to two types of difficulty. First, the 
center of reactivity of the left-hand cylinder (Fig¬ 
ure 45) proved to be below that of the stationary 
cylinder; second, the rapid lift through the water 
created hydrodynamic forces that swung the cylinders 
closer together. The combination of the two effects was 
enough to drive the assembly prompt critical and to 
have maintained at least this much reactivity for 
0.2 seconds if the power excursion had not occurred. 
The first power spike is estimated to have contained 
6 x 10 15 fissions. It is possible that one or more 
excursions into the prompt region followed because 
boiling was the primary quenching mechanism. 

In this excursion of 10 17 fissions, no radiation doses 
were received, and no contamination was found in the 
experimental area. Damage to the uranium consisted of 
a small amount of oxide flaking and blistering. The 
experimental area was in use two days later. 



Figure 45. The Los Alamos Scientific Laboratory assembly machine employed for measurements of critical 
separation distances. 
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4. Los Alamos Scientific Laboratory, 18 April 1952 4445 

Jemima, cylindrical, unreflected 235 U metal assembly; excursion history unknown; insignificant exposures. 


The system in which the excursion took place was a 
cylindrical, unreflected, enriched 93% 235 U metal 
assembly made up of a number of plates, each 267 mm 
in diameter and 8 mm thick. 

Complete assembly of the two components had 
been made previously with six plates in the lower 
component, but with first three and then four plates in 
the upper component. 

A plot of the reciprocal multiplication versus 
number of plates, or total uranium, shows clearly that 
the system should not have been assembled with 
11 plates. Nevertheless, such an assembly was at¬ 
tempted following a computational error made 
independently by two people. Contrary to operating 
regulations, a graph of the data had not been plotted. 
The burst yield was 1.5 x 10 16 fissions. 

There is no way to determine the power history 
experienced by the 92.4 kg mass without reproducing 


the experiment. At the time the system was near 
prompt criticality, the lower component was coasting 
upward and probably inserting no more than 2 or 3 $/s, 
a rate that could cause a power spike of about 
10 15 fissions. The power would then stabilize at about 
10 17 fissions/s, just enough to compensate for the 
reactivity insertion rate. Most of the 1.5 x 10 16 fissions 
must have occurred in this plateau. The power dropped 
essentially to zero when the automatic scram system 
separated the two masses of metal. 

During the remotely controlled operation no 
damage was done to the system, even to the fissile 
material. None of the personnel received any radiation, 
and the experimental area was not contaminated. The 
apparent self terminating property of this excursion 
stimulated study with Lady Godiva, 46,47,48 which 
became a facility for generating large bursts of fission 
spectrum neutrons in less than 100 ps. 


5. Sarov (Arzamas-16), 9 April 1953 49 

Plutonium, natural uranium reflected, assembly; single excursion; insignificant exposures. 


This accident occurred on 9 April 1953 as an 
experiment was being conducted on a critical assembly 
constructed on a vertical split table, FKBN (Figure 46). 
FKBN, designed and built in 1950, had a hydraulically 
driven vertical table as its main feature. It was not, 
however, equipped with a fast acting, gravity driven 
scram mechanism. FKBN located in Building B 
(Figure 47), was operated remotely from an adjacent 
control room. 

The critical assembly involved in the accident had 
an -100 mm outside diameter plutonium core (about 8 
kg mass) surrounded by a 300 mm outside diameter 
natural uranium reflector. The core was composed of 
four hemispherical shells (hemishells) of 8-phase 
plutonium with a thin nickel coating. The core had a 
28 mm diameter central cavity in which a neutron 
source (~10 7 n/s) had been placed. The reflector was 
composed of six nesting hemishells that had a 26 mm 
diameter channel at their plane of separation. 

The assembly being constructed was separated into 
two pieces (Figure 46): 

1. the upper part on a fixed support consisted of a 
single natural uranium hemishell, with inner and 
outer diameters of 120 mm and 300 mm, 
respectively; and 

2. the lower part, constructed on the table, consisted of 
three lower natural uranium hemishells, the 
plutonium core, and two upper natural uranium 
hemishells. 



Figure 46. FKBN and assembly involved in the 
9 April 1953 accident. 
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At the equatorial plane, the two halves were 
separated by a 5 mm thick disk of duralumin that had a 
radial groove into which twenty-four, 80 mg pellets of 
U 3 0 8 (90% enriched in 235 U) were placed. The pellets 
were used to determine an integrated fission yield for 
the assembly. 

Initially, the distance between the lower and upper 
parts was 200 mm. The minimal distance the pieces 
could be brought together depended on the thickness of 
the steel stops manually installed by the operator. The 
stops were placed in a horizontal cut in the lower part 
of the assembly prior to beginning the closure (Fig¬ 
ure 46). As the steel stops contacted the upper part of 
the assembly, the upward movement of the table would 
automatically cease. The operator would then measure 
the neutron flux and determine the corresponding state 
of subcriticality. 

The accident on 9 April 1953 was due to an error 
made by an operator working alone in violation of 
regulations. The operator mistakenly installed 5 mm 
steel stops instead of the 10 mm required by the 
experimental plan. This caused an excursion as the 
assembly was brought together and resulted in a 
significant release of heat that melted a portion (~70 g 
mass) of the plutonium core. The plutonium flowed out 
into the horizontal channel in the natural uranium 
reflector. 

The excursion activated an emergency alarm, at 
which time the operator pushed a button on the control 
panel and hydraulically lowered the table back down to 
its original position terminating the excursion. The 
accident occurred during lunch, when most of the 


experimental team (~10 people) was out. About 2 
hours afterwards, the experiment supervisor and the 
operator entered the FKBN experimental cell and 
performed a visual inspection, during which they 
received doses of 1.6 rad and 1 rad, respectively. 

Subsequent inspection of the assembly parts 
determined that three (of the four) plutonium 
hemishells had gotten so hot that they fused with the 
duraluminum disk. Therefore, that portion of the 
system was shipped to the Chelyabinsk-40 (Mayak) 
facility for further disassembly. 

Analysis of the U 3 0 8 pellets within the assembly 
gave an integrated energy release equivalent to about 
~1 x 10 16 fissions. There was no significant contami¬ 
nation within the facility allowing it to be reused for 
later experiments. 

The accident investigation report stated, 

“...The design of FKBN and its 
automatic safety features are such that it 
provides safeguards for only slow changes 
in reactivity. FKBN is not safeguarded 
against negligent operation, and therefore 
per safety regulations operations should 
he performed only in a manner that would 
not require any safety system response 

As a result, it was concluded that FKBN did not 
comply with safe operation requirements for critical 
assemblies, and it was dismantled. As a replacement, 
the design was modified several times resulting in the 
construction by VNIIEF of FKBN-1 (1955), FKBN-2 
(1963), FKBN-2M, and others equipped with fast 
response safety systems. 49 



Figure 47. Building B floor plan. 
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6 . Los Alamos Scientific Laboratory, 3 February 1954 42 ’ 4447 

Lady Godiva reactor; bare 235 U sphere; control rod incorrectly operated; single excursion; insignificant 
exposures. 


7. Los Alamos Scientific Laboratory, 12 February 195747 , 48 , 49 , 50 , 51,52 

Lady Godiva reactor; bare 235 U sphere; added reflection; single excursion; insignificant exposures. 


These two excursions occurred in the Lady Godiva 
assembly, an unreflected metal reactor fabricated in 
three principal sections that when assembled formed a 
sphere. Figure 48 shows Godiva in the scrammed state. 
The central section was fixed in position by small 
tubular steel supports, while the upper and lower 
sections were retractable by means of pneumatic 
cylinders, thus providing two independent scram 
mechanisms. The critical mass was about 54 kg of 
uranium enriched to 93.7% 235 U. It was operated 
remotely from a distance of 1/4 mile. 

The first accidental excursion occurred during 
preparations for a scheduled prompt burst, part of a 
program to measure the parameters associated with 
excursions. Normally, a burst was initiated by estab¬ 
lishing delayed criticality. This was accomplished by 
adjusting control rods, lifting the top section to reduce 
reactivity and allow decay of the neutron population, 
and lowering the top section into position and rapidly 
inserting a burst rod worth slightly more than 1 $. 

A power excursion typically creating about 10 16 fis¬ 
sions in 100 ps followed; in 40 ms the system would be 
scrammed safely. Because the only source of neutrons 
was spontaneous fission, it was customary to assemble 
to an excess reactivity of about 70 0 to generate 
sufficient neutrons to determine the settings for 
delayed criticality in a reasonable time. This accidental 
excursion was caused, apparently, because additional 
reactivity was inserted by error after assembly to 70 0, 
but before a fission chain started. 

The excursion yield was 5.6 x 10 16 fissions, about 
six times the yield of the average burst. There was no 
radiation hazard, contamination, personnel exposures 
to radiation, or significant damage to the major 
uranium parts. One piece was slightly warped and 
required remachining. Several light steel supporting 
members were bent or broken (Figure 49). 

The second accidental excursion occurred during 
preparations for an experiment in which Godiva was to 
provide a pulse of fast neutrons. Again, the burst 
occurred during assembly to establish, in this case, a 
fiducial point at about 80 0 excess reactivity. Control 
rods were to be adjusted on the basis of this period. 

The extra reactivity is thought to have been contributed 


by a large mass of graphite and polyethylene that was 
to be irradiated. This mass had just been moved close 
to Godiva, and either the change in reflection was 
underestimated or the material slumped further toward 
Godiva. 

The burst yield was 1.2 x 10 17 fissions, about 
12 times the standard excursion. The uranium metal 
was severely oxidized, warped, and apparently had 
been plastic near the center. The central burst rod was 
nearly ruptured and, at its center, must have been 
within 100°C of the uranium melting temperature. 
Figure 50 shows several of the pieces. External damage 
was limited to the supporting structure; radioactive 
contamination consisted of oxide scale; cleanup 
proceeded rapidly. Repair of Lady Godiva was not 
practical; therefore construction of Godiva II 59 
specifically designed for burst operation, was acceler¬ 
ated. Despite the severity of the excursion, operating 
personnel received no significant radiation exposures 
because of the large distance between the reactor and 
the control room. 

The behavior of the Godiva system during 
superprompt critical power excursions is well under¬ 
stood both experimentally and theoretically. 47 ’ 51 ’ 52 
Lady Godiva experienced well over 1,000 safe, 
controlled bursts. A coupled hydrodynamics-neutronics 
code describes the behavior of the system adequately. 

The first excursion (5.6 x 10 16 fissions) must have 
had a period of 6.4 seconds, equivalent to a reactivity 
excess over prompt criticality of 15 0. The excess 
reactivity of the larger excursion (1.2 x 10 17 fissions) 
was 210 above prompt criticality, corresponding to a 
period of 4.7 ps. 

The fission yield of 1.2 x 10 17 in the second 
accident is equivalent to the energy contained in 1.7 lb 
of high explosive (HE), but the damage was much less 
than would have been caused by that quantity of HE. 
The above mentioned code can predict the fraction of 
fission energy converted to kinetic energy; in this case, 
only about 1.4% of the energy, equivalent to 
0.024 pounds of HE, was available as kinetic energy to 
do damage. The damage was consistent with this 
figure, and it is evident that most of the fission energy 
was deposited as heat. 
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Figure 48. The Los Alamos Scientific Laboratory Lady Godiva assembly (unreflected enriched-uranium sphere) in the 
scrammed configuration. 
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Figure 49. Lady Godiva after the excursion of 3 February 1954. 
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Figure 50. Burst rod and several sections of Lady Godiva showing oxidation and warpage that accompanied the 
second accident, 12 February 1957. 


8. Los Alamos Scientific Laboratory, 17 June 1960 

235 U metal, graphite reflected, assembly; single excursion; insignificant exposures. 


The critical parameters of highly enriched 
(93% 235 U) uranium metal cylinders in thick graphite 
(about 9 inches) and near infinite water reflectors were 
being investigated. In the experiment of interest, an 
approximate 48 kg uranium annulus was built up on a 
cylinder of graphite that, in turn, rested on a hydraulic 
lift device. This annulus was raised by remote control 
into a reflector of graphite resting on a stationary steel 
platform. The system became critical before complete 
assembly and was scrammed both manually and 
automatically at about 1 inch from closure. Following 
the scram signal, the lift dropped rapidly and the 
system became subcritical, but about one-third of the 
metal mass stuck in the graphite reflector for a few 
seconds before falling to the floor. The yield was 
6 x 10 16 fissions; there was no contamination or 
damage to the fissile metal. Personnel radiation doses 
were immeasurably small. 


This accident was, in many respects, similar to that 
of Jemima (II-B.4). The reactivity sensitivity of this 
particular experiment was not measured after the 
power transient but, when investigators examined 
similar systems, the reactivity insertion rate probably 
did not exceed a few dollars per second and the initial 
spike could have included 10 15 fissions. 

The fission yield was very close to that of the first 
Godiva accident (3 February 1954, 5.6 x 10 16 fissions), 
and the two masses are quite comparable. In the earlier 
case, all of the energy release took place during the 
power spike and some warping of pieces and damage 
to supports was seen. In this transient, the metal was 
undamaged, thus supporting the assertion that the 
initial power spike was small compared to the total 
yield. 
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9. Oak Ridge National Laboratory, 10 November 1961 53 

235 U metal , paraffin reflected , assembly; single excursion; insignificant exposures. 


This power transient in about 75 kg of highly 
enriched (about 93% 235 U) uranium metal reflected 
with paraffin took place when one portion on a vertical 
lift machine was approaching the other stationary 
portion. The experiment was the last of a series during 
which uranium or paraffin had been added by incre¬ 
ments to change the reactivity of the complete system; 
all previous experiments had been subcritical when 
fully assembled. In this case, the system became 
supercritical while the lift was in motion, leading to a 
yield of between 10 15 and 10 16 fissions. 

The closure speed of the lifting device was 
16 inches per minute; delayed criticality was later 
determined to be at a separation distance of 2.7 inches. 
The sensitivity of the system at this point was 


8.6 $/inch. Thus, the reactivity insertion rate was 
2.3 $/s and a lift slowdown, which became effective at 
1.94 inches, did not affect the course of the transient. 

The reactivity and power histories must have been 
similar to those of the Jemima (II-B.4) accident, except 
that the pertinent scram delay time was only 50 ms in 
this case. The initial spike could not have exceeded 
10 15 fissions, and the remaining energy must have been 
created during the subsequent plateau. The appearance 
of the metal (smooth, no oxide) and the fact that the 
paraffin did not melt qualitatively confirmed the yield 
estimate of 10 15 to 10 16 fissions. Personnel radiation 
doses were trivial, and the laboratory was ready for 
normal use within 1.5 hours. 


10. Sarov (Arzamas-16), 11 March 1963 54 

Plutonium , lithium deuteride reflected assembly; inadvertent closure; single excursion; two serious exposures. 


This accident occurred on 11 March 1963 as 
modifications and maintenance were being performed 
on a vertical split machine, MSKS. MSKS (Figure 51) 
was located within Building B at a reactor site (Fig¬ 
ure 52) and was used to perform experiments other 
than critical approaches. It was limited to assemblies 
whose shape, composition, maximum subcritical 
multiplication (<1,000), safe assembly-disassembly 
procedures, and the contribution of fixtures and 
equipment in use had already been verified by experi¬ 
ments on the vertical split machine, FKBN-1, located 
in the same Building B (Figure 52). MSKS was 
equipped with an automatic gravity driven scram 
system and closure of an assembly was performed 
remotely from a control panel behind concrete shield¬ 
ing (Figure 52). 

The assembly involved in the accident had a 
135 mm outside diameter plutonium core surrounded 
by a -350 mm outside diameter lithium deuteride 
reflector (Figure 51). The core was composed of a set 
of 8-phase plutonium metal hemishells in a thin 
(0.1 mm) nickel coating. The core had a 63 mm central 
cavity in which a neutron source (-10 6 n/s) had been 
placed. The neutron reflector was a set of LiD 
hemishells, -107 mm thick. 

On 9 March 1963, the MSKS chief and operations 
engineer constructed the assembly on MSKS and 
conducted approach to critical experiments without 
first performing the required experiments on FKBN-1. 



Figure 51. MSKS and assembly involved in the 
11 March 1963 accident. 
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On 11 March 1963, the facility chief and the 
operations engineer proceeded with pre-experiment 
operations with the assembly pieces still in place. The 
experimentalists attempted to make adjustments to the 
machinery of MSKS using unauthorized attachments 
in violation of the operating procedures. As they 
worked on MSKS adjusting the electromechanical lift 
mechanism, an excursion occurred. Seeing a flash of 
light, the experimentalists immediately exited and went 
to the control room, where the facility chief pushed the 
control button lowering the table. The automatic scram 
system did not activate because the detectors to which 
it was tied were not operating. 

The accident was the result of gross violations of 
the MSKS operating procedures by the facility chief 
and operations engineer. The excursion was due to the 
inadvertent closure of the assembly by the experimen¬ 
talists. As a result of the accident investigation and 
analysis, it was judged that the assembly had ap¬ 
proached or possibly even exceeded the prompt critical 


state. The number of fissions was estimated to be 
-5 x 10 15 fissions. The nickel clad of the plutonium 
was not breached and therefore no contamination 
resulted. MSKS itself was undamaged and remained in 
long-term service. 54 

Since the assembly parts were not damaged, they 
were used in a special set of experiments to more 
accurately estimate the exposure to personnel. The 
facility chief’s dose was -370 rem, and the operations 
engineer received -550 rem. Both experienced 
radiation sickness. The facility chief survived for 
26 years, and the operations engineer was still alive 
36 years after the accident. Both were immediately 
taken to a hospital for treatment. Eventually they 
returned to work at the VNIIEF Physics Division. Four 
other people working in adjacent area also received 
doses, although much lower (-7, -1,-1, and 
-0.02 rem). 



Figure 52. Building B floor plan. 
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11. Lawrence Livermore Laboratory, 26 March 1963 55 

235 U metal, beryllium reflected, assembly; single excursion; insignificant exposures. 


The critical assembly consisted of concentric 
cylinders of highly enriched uranium metal surrounded 
by a beryllium reflector. The total enriched uranium 
mass of 47 kg was divided into two parts with the 
central core on a lift device and the larger diameter 
rings with the reflector on a fixed platform. The 
approach to criticality was to be achieved by lifting the 
core in a series of steps into the reflected annulus. The 
experiments were performed in a heavily shielded vault 
adjacent to the area where the Kukla reactor produced 
prompt bursts of neutrons. 

This step wise assembly procedure was successfully 
followed for seven multiplication measurements. After 
the eighth apparently normal assembly, the system 
suddenly became highly supercritical. An explosive 
sound was heard, scrams and alarms were actuated, 
and after a few seconds, the uranium could be seen 
melting and burning. The yield was later measured at 


3.76 x 10 17 fissions, but little or no explosive energy 
was generated. About 15 kg of uranium burned and 
about 10 kg melted and spread over the floor. Dose to 
personnel in or near the building was low and in no 
case exceeded 0.12 rem. The reactor room was highly 
contaminated. 

The accident is believed to have been caused by the 
central cylinder of metal on the lift being very slightly 
off center. When it was lifted into the fixed half, one or 
more of the metal rings were carried upward. Follow¬ 
ing the eighth assembly, the system adjusted itself and 
the rings settled properly around the central core, 
abruptly increasing the reactivity. The rate is not 
known nor is the maximum reactivity. The initial spike 
probably did not exceed 10 16 fissions; most of the 
energy was generated during a high plateau. Quench¬ 
ing came through thermal expansion and melting. 


12. White Sands Missile Range, 28 May 1965 56 

Unreflected uranium-molybdenum metal fast burst reactor; single excursion; insignificant exposures. 


The success of the Godiva reactor in creating very 
sharp, intense bursts of near fission spectrum neutrons 
stimulated the development of several similar reactors 
for production of pulsed irradiations. One of these was 
the White Sands Missile Range (located in southern 
New Mexico in the United States) fast burst reactor, 
which was composed of 96 kg of an alloy of highly 
enriched uranium and 10 wt% molybdenum. This 
reactor design was somewhat similar to the Godiva II 
reactor 42 —seven rings and a top plate all of which 
partially enclosed a large central volume that at 
criticality was filled with a safety block. Two control 
rods and a burst rod penetrated the rings. The assembly 
was held together by three metal bolts. Initially, the 
bolts were stainless steel, but just prior to the accident 
they were replaced by bolts composed of the uranium- 
molybdenum alloy, and re-calibration of the reactivity 
worth of various components was underway. The new 
worth of the control rods, burst rod, minor compo¬ 
nents, and the first inch withdrawal of the safety block 
had been measured. 

Further calibration of the safety block seemed to 
require higher neutron flux than that given by a 
polonium-beryllium neutron source. To obtain a power 
of about 1 watt, an interlock was bypassed and the 


safety block was set into motion inward, approaching a 
state thought to be known. The excursion took place as 
the safety block neared the one-half inch, position. 

All scrams functioned as designed, but the short 
period allowed a very high power to be attained, and 
the excursion was actually terminated by thermal 
expansion of the metal. The new uranium-molybdenum 
assembly bolts failed (the heads snapped); the two top 
rings and minor parts were tossed 5 to 15 feet. 

This accident was well instrumented. The minimum 
period was 9.2 ps, the maximum reactivity 15 0 above 
prompt criticality, the reactivity insertion rate 2.2 $/s, 
and the burst width 28 ps. The internal temperature rise 
of 290°C suggested a fission yield of 1.5 x 10 17 , which 
is only 1.4 times the maximum expected from normal 
operations. 

During this unexpected burst, damage was limited 
to the failure of the assembly bolts and very slight 
chipping of the nickel coating of the rings. Personnel 
radiation doses were immeasurably small. One hour 
after the excursion the cell was entered and radiation 
levels were determined to be higher than normal 
background, but not appreciably higher than those 
measured after a routine burst. 
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13. Chelyabinsk-70, 5 April 1968 5758 

U(90) metal , natural uranium reflected ' assembly; single 

The accident occurred on 5 April 1968 at the 
Russian Federal Nuclear Center (VNIITF) located in 
the southern Ural mountains between the cities of 
Ekaterinberg and Chelyabinsk. Criticality experiments 
began at VNIITF in 1957 using the FKBN vertical lift 
assembly machine.* FKBN is a Russian acronym for 
“a physics neutron pile.” At that time, intensive work 
was under way in the development of powerful reactors 
for studying radiation tolerance. Assembled on the 
FKBN in particular were a number of critical configu¬ 
rations with a thick reflector and a large internal cavity. 
This enabled operation in the static and pulsed mode 
up to several kilowatts. In the case under consideration, 
research was being conducted on the effect that a 
spherical polyethylene sample would have on the 
kinetic characteristics of the reactor system by means 
of the boiler noise method. 

The FKBN assembly machine and system compo¬ 
nents, as configured at the time of the accident, are 
shown in Figure 53. The core of the assembly consists 
of a U(90) spherical metal shell with an internal cavity. 



Figure 53. Approximate accident configuration of the 
FKBN vertical lift assembly machine and core. 


excursion , two fatalities. 

The core could be surrounded by a thick, spherical, 
natural uranium metal reflector. Figure 53 illustrates 
that the external reflector is split into upper and lower 
halves. The accidental excursion resulted in the death 
of two knowledgeable nuclear criticality specialists 
standing near the assembly at the time of the excursion. 
A criticality alarm system was not installed at the time 
of the accident. The upper reflector was natural 
uranium metal having a total uranium mass of 308 kg. 
The inside radius was 91.5 mm and outside radius was 
200 mm. The core was a 90% enriched uranium metal 
spherical shell having an inside radius of 55 mm and 
an outside radius of 91.5 mm. The core uranium mass 
was 47.7 kg of uranium or 43.0 kg of 235 U. The 
uranium core was constructed of nested, close fitting, 
hemispherical components with radii of 55 mm, 

67.5 mm, 75.5 mm, 83.5 mm, and 91.5 mm. A polyeth¬ 
ylene sphere had an outside radius of 55 mm. The 
lower reflector was natural uranium with an inside 
radius of 91.5 mm and an outside radius of 200 mm. 

The accident occurred on a Friday evening after 
normal working hours. Earlier that same day an 
assembly had been constructed on the FKBN machine. 
Two specialists present for the daytime assembly 
decided to continue working into the evening in order 
to complete a second assembly. The evening assembly 
was to be a repeat of the daytime assembly with one 
variation—a solid polyethylene sphere was to be 
inserted into and fill the cavity of the core which was 
void for the daytime assembly. Using a hand-held 
controller panel, the senior specialist operated an 
overhead tackle to lower the upper half of the reflector 
to make contact with the core (the operation of 
lowering the upper-half of the reflector could not be 
carried out under remote control). The junior specialist 
stood next to the FKBN with both hands on the upper 
reflector to guide it into place. The accident occurred 
as the upper half of the reflector was being lowered 
onto the core and was about to make contact with it. 
The emergency instrument system was operating and 
responded after the power level of the excursion 
reached the kilowatt level. The system dropped the 
lower half of the reflector, which was sufficient to 
drive the system deeply subcritical and terminate the 
excursion. 

The senior specialist made an error of judgment 
when he expected the polyethylene sphere to have a 
small effect on system reactivity. The investigation also 


The prototype of the FKBN was developed and used earlier at the Arzamas-16 research center (VNIIEF). It is mentioned in the 
reminiscences of A. D. Sakharov. See also proceedings of ICNC’95, Yol. 1, paper 4-44, “Criticality Measurements at VNIITF 
Review,” V. A. Teryokhin, V. D. Pereshogin, Yu. A. Sokolov. 
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established that in addition to the error in judgment, 
the specialist violated several operational procedures. 
For the evening assembly, the lower half of the 
uranium reflector was not positioned 20 mm above its 
lower stop as required to ensure an adequate margin of 
criticality safety for the assembly process. Instead, the 
lower reflector was positioned 90 mm above its lower 
stop which is 30 mm below its upper stop. The upper 
stop corresponds to the lower reflector making contact 
with the lower core. The failure to reposition the lower 
reflector following the daytime assembly was identi¬ 
fied as the primary cause of the accident. 

The investigation revealed several additional 
violations of procedures: 

• The instrument system designed to be sensitive 
enough to alert the specialist that system multiplica¬ 
tion was rapidly increasing as they lowered the 
upper reflector half was not operating. This system 
had been switched off following the daytime assem¬ 
bly and not switched back on for the evening as¬ 
sembly. 

• A third specialist was required to be present in the 
control room, but the control room was unmanned. 

• The assembly required the presence of a health 
physicist. The health physicist was not present 
because he was not notified of the evening assem¬ 
bly. 

Following the excursion, the two specialists 
remained conscious and maintained their self-control. 
They were able to inform administrative officials that 
the accident had occurred and to place a phone call 
requesting an ambulance. The senior specialist carried 
out dose estimates for himself and the junior specialist. 
The senior specialist made the following entry into his 
experimental log. 

“Eighty-mm diameter plug * was removed. 

The gap was 30 mm. Polyethylene was 
inserted. When moving the shell down a 
pulse was produced. Safety system was 
actuated. The operator was at the distance 
of 0.5 meters away from the shell. The 
responsible person - at 1.7 meters away 
from the overhead-track hoist pendant. 

There was a flash, a shock, a stream of 
heat in our faces. The polyethylene contri¬ 
bution exceeded the expected magnitude 

The two criticality safety specialists working with 
this assembly at the time of the excursion were 
knowledgeable in neutron physics and the experimen¬ 


tal procedures required for criticality measurements. 
The senior specialist was born in 1929, joined the 
facility in 1955, and became qualified to handle fissile 
material in 1958. The junior specialist was born in 
1938, joined the facility in 1961, and became qualified 
to handle fissile material in 1962. Both were qualified 
to carry out the experimental procedures taking place 
at the time of the accident. At the time of the excur¬ 
sion, the junior specialist was standing approximately 
0.5 m from the assembly axis. The senior specialist 
was located approximately 1.7 m away. The junior 
specialist received an accumulated neutron plus 
gamma dose in the 20-40-Sv range. The senior 
specialist received an accumulated neutron plus 
gamma dose in the 5-10-Sv range. Following the 
accident, both specialists were taken to the local 
hospital and then immediately flown to the 
Bio-Physics Institute in Moscow. The junior specialist 
died three days after the excursion. The senior special¬ 
ist survived for 54 days after the excursion. 

The estimated yield of the excursion was 6 x 10 16 
fissions. At the beginning of the excursion, the upper 
half of the natural uranium reflector was descending on 
the core at approximately 100 mm/s, driving the 
assembly above prompt critical. This closure speed 
corresponds to a reactivity insertion rate of about 
40 (3/sec. A 5.2 x 10 6 (neutrons per second) 238 Pu-Be 
source was located off-center outside of the uranium 
core of the assembly. 

The investigation concluded that although the 
specialists were highly experienced in working with 
critical assemblies, it was their overconfidence and 
haste that resulted in their loss of life. Both specialists 
had theater tickets for the same evening as the acci¬ 
dent. The senior specialist prepared the procedure for 
the evening assembly disregarding a principle rule for 
criticality safety which stated: Every unmeasured 
system is assumed to be critical. The investigation 
concluded that the accident was caused by “severe 
violations of safety rules and regulations which 
occurred due to insufficient control by facility manag¬ 
ers and health physics personnel.” 


*This plug was located at the north pole of the upper reflector and passed through the full thickness of the reflector. 
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14. Aberdeen Proving Ground, 6 September 1968 59 

Uranium-molybdenum metal fast burst reactor; single excursion; insignificant exposures. 


The Army Pulse Radiation Facility Reactor 
(APRFR), located in Maryland in the United States, 
was another of the series of Godiva-like reactors. The 
APRFR design evolved from the Health Physics 
Research Reactor of the Oak Ridge National Labora¬ 
tory and was intended to provide large values of 
neutron flux and fluence. 

During pre-operational testing, several minor 
variations in the reactor configuration were studied in a 
program to optimize performance. During this testing, 
an unexpectedly large burst (6.09 x 10 17 fissions) 
occurred. It exceeded, by about a factor of three, the 
maximum burst size the reactor was expected to 
withstand without damage. Internally the core reached 
the melting point of the fuel, 1150°C. The initial period 
was measured as 9.1 jus, and the reactivity was esti¬ 
mated to have been about 18 0 above prompt criticality. 
The planned excess reactivity for this burst was 8.05 0, 
which was expected to result in a burst of 1.68 x 10 17 
fissions. 


Post accident analysis indicates that the extra 
reactivity resulted from a reactor configuration such 
that the burst rod passed through a reactivity maximum 
before seating. This condition had not been recognized; 
apparently on previous operations the burst rod had 
reached its seated position before the arrival of an 
initiating neutron. In the absence of a strong neutron 
source, wait times before an excursion occurs can be 
long. 97 

Damage was limited to the fuel components of the 
reactor and included some warping and spalling as 
well as elongation of bolts. The four central rings fused 
together at the inner surface and experienced some 
cracking. 

There were no detectable external or airborne 
radiation hazards and no personnel overexposures. 


15. Sarov (Arzamas-16), 17 June 1997 49 ’ 60 ’ 61 ’ 62 

U(90) metal , copper reflected, assembly; multiple excursions; one fatality. 


This accident occurred at 10:40 on 17 June 1997 as 
an experimental assembly was being hand constructed 
on a vertical split machine, FKBN-2M. FKBN-2M is 
located in an experimental cell (12mx 10 m x 8 m) of 
a dedicated building (Figure 54) at a reactor site. 60 A 
schematic of FKBN-2M is shown in Figure 55. The 
lower part of a research assembly is constructed on a 
table that can be moved vertically up and down using 
hydraulics, although the table had to be in the up 
position during construction of an assembly. The upper 
part is placed on a stand consisting of a ring, upper and 
lower support, and a carriage that can be moved 
horizontally and into position over the lower part of the 
system. Closing of the assembly (by moving the 
carriage over and the table up) is performed remotely 
from a control room behind an ~3 meter thick concrete 
shielding wall (Figure 54). FKBN-2M is equipped with 
a fast acting gravity driven scram that automatically 
causes the table to drop to its down position if the 
neutron flux exceeds a preset value. 


Various sets of nesting fissile (uranium, plutonium) 
and nonfissile hemishells (steel, copper, polyethylene, 
etc.), standardized in size, exist to allow for a variety of 
experimental configurations. Assemblies are con¬ 
structed by consecutively stacking the hemishells 
together into the desired configuration. 

On 17 June 1997, an experimenter working alone 
and without having completed the proper paper work 
(both violations of safety requirements), was construct¬ 
ing an experimental assembly consisting of a core of 
uranium, U(90) reflected by copper. 61 ’ 62 ’ 63 The 
experimenter was an expert who was confident that he 
was recreating an assembly that had been the focus of 
an experiment performed successfully in 1972. He had 
taken the dimensions for all of the system components 
from the original 1972 logbook. However, when he 
copied down the inside and outside dimensions of the 
copper reflector (167 and 205 mm, respectively) he 
incorrectly recorded the outside dimension as 265 mm. 
Using this incorrect information, the experimenter had 
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completed the construction of the lower half of the 
assembly on the table (Figure 56). This lower half 
consisted of the copper reflector (with an outside 
diameter of 258 mm since that was all that was 
available) and a uranium core (9 spherical layers, with 
an inside diameter of 28 mm and an outside diameter 
of 167 mm) with a neutron source (~10 5 n/s) placed in 
its center. As he went to position the first upper copper 
hemishell (with an inside and outside diameters of 
167 mm and 183 mm, respectively) into place it 
dropped onto the bottom assembly. This led to the 
initial prompt critical spike and the ~6.5 day excursion. 
The automatic scram system activated and dropped the 
table to its down position 60 but otherwise had no effect 
on the supercritical assembly. After the initial fission 
burst, the assembly eventually reached steady state 
power conditions. 

Seeing a flash of light, the experimenter left the 
experimental cell, shutting the safety door behind him. 
He reported the accident to the engineer and attending 
health physicist who were in the control room at the 
time. The head of the laboratory and the facility chief 
were then notified by phone. The facility chief arrived 
shortly thereafter, at which time the experimenter 
related the composition and dimensions of the assem¬ 
bly as documented in his logbook. 60 

The accident burst conditions were reproduced from 
measurement of the assembly’s neutron flux (19 June 
1997) and from computations shown in Figure 57 


(these computations were performed by 
Dr. V. F. Kolesov and Dr. V. Kh. Khoruzhy). The 
asymptotic power was estimated to be 480 watts, 
corresponding to an event with an initial excess 
reactivity 6.5 0 above prompt critical, i.e., 

Ak = 0.00745. The initial superprompt critical spike of 
~4 x 10 15 fissions was followed by a subprompt critical 
excursion lasting 3 to 5 minutes and generating 
~2 x 10 17 fissions. This second excursion was followed 
by highly damped power oscillations separated by 
about 40 minute intervals. Several hours afterwards, 
the assembly power, and the core and reflector tem¬ 
peratures had reached equilibrium levels. The tempera¬ 
ture of the uranium core was estimated to have been 
865°C. 

The excursion was terminated around 00:45 on 
24 June 1997 when a vacuum gripper was used to 
remove most of the assembly from the stand, leaving 
only the outermost lower copper hemishell in place. 
The removed portion of the assembly was placed onto 
a support stand in the room (Figure 58). All the 
recovery operations were done remotely. 

Later, another two hemishells from the lower 
reflector were removed, and the system was then 
separated into two parts and packaged into containers. 
After the y-radiation decreased to allowable levels, it 
was planned to further disassemble the system (into 
single components) to restore the damaged copper- 
nickel protective coating on fissile material parts. 



Ring 

Assembly 
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Figure 56. Accident configuration. 
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The main cause of the accident was the erroneous 
judgment of the experimenter as to the state of the 
experimental assembly he was constructing. The 
accident resulted in virtually no damage to the machin¬ 
ery or equipment in the facility. The experimental cell 
was not contaminated. The experimenter received 
estimated absorbed doses of 4,500 rad from neutrons, 
and 350 rad from gamma-rays. 61 ’ 62,63 That same day ^ 
he was transported to a specialized clinic in Moscow, S 

where he died during the night between 19 and 7T 

20 June, 1997. No other personnel were injured or g 

received significant exposures. Radiation levels inside D_ 
the control room and in the vicinity of the building 
remained at normal levels. The total energy released 
was estimated to be equivalent to 10 19 fissions. After 
the accident, experiments with FKBN-2M were 
stopped to implement safety upgrades to the research 
operations. 



Time (seconds) 

Figure 57. Calculated power history for the accident. 



Figure 58. Removal of the main core of the assembly from the lower copper hemishell reflector. 
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C. MODERATED METAL OR OXIDE SYSTEMS 


1. Los Alamos, New Mexico, 6 June 1945 37 

Pseudosphere of uranium cubes; water reflected; single excursion; 3 significant exposures. 


The experiment, designed before the days of remote 
control, was intended to establish the critical mass of 
enriched uranium metal surrounded by hydrogenous 
material. The uranium mass of 35.4 kg (average 
enrichment 79.2%) was stacked in the form of a 
pseudosphere constructed of one-half inch cubes and 
one-half inch, by one-half inch by one inch blocks. The 
core was in a 6 inch cubical polyethylene box with the 
void space filled with polyethylene blocks. The whole 
assembly was placed in a large tank that was then 
partially filled with water. 

Unexpectedly, the assembly became critical before 
water had completely covered the polyethylene box. 
The situation was aggravated because no scram device 
was built into the system and the inlet and drain valves 
were 15 feet apart. Before the system was reduced to a 
safely subcritical state 5 or 10 seconds later, a total of 3 
to 4 xlO 16 fissions occurred. This was an energy 
release sufficient to raise the average temperature of 
the metal more than 200°C. Subsequent examination of 
the polyethylene box showed that it was not watertight. 
It is probable that water seeped slowly into the 
uranium assembly as the water level was being raised 
above the bottom of the box. The additional modera¬ 
tion then caused the supercritical situation that was 
terminated by boiling of the water within the box and 
next to the metal cubes. 

Calculations have provided some insight into this 
event. Nesting spherical shells of U(79.2) (thickness of 
8 mm and total mass of 35.4 kg) were evaluated with 


gaps between shells of 0.5 and 1 mm. Adding water to 
the gaps increased the multiplication factor by 0.04 for 
the 1 mm gap, while for the 0.5 mm case, Ak was 
found to be about 0.02. These results apply to the 
assembly fully reflected by water, where the calculated 
keff was 1.024 and 1.018, respectively. The full water 
reflector was found to be worth about 0.21 in k. 
Although the geometry of the calculations represents 
only a rough approximation of the actual assembly, 
refinements are probably not justified. Indications are 
that the uranium cubes were “as cast,” so the actual 
volume available to the water cannot be known. 

The characteristics of excursions of large masses of 
fissile metal in water are, at best, poorly known. A 
calculation by Hansen has shown that for a 68.5 mm 
radius 235 U sphere in water, 15% of the fissions occur 
in the outer 0.5 mm and the fission density in this 
region is six times that at the center. A spike of 
3 x 10 15 fissions would then raise the surface tempera¬ 
ture 130°C, while the central regions would remain 
relatively cool with a temperature rise of only 19°C. 
The initial spike must have been of this order of 
magnitude, with the majority of the fissions following 
at a much lower average power. 

In this excursion, three people received radiation 
doses in the amounts of 66, 66, and 7.4 rep.* There 
was no contamination, and the active material was used 
again in 3 days. 


*See Appendix A. 
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2. Chalk River Laboratory, late 1940s or early 1950s 63 

ZEEP assembly; single excursion; three significant exposures. 


The ZEEP assembly consisted of aluminum clad 
uranium metal rods in a heavy water moderator. The 
cylindrical aluminum reactor tank was reflected by 
graphite on the sides and bottom, shielded on the sides 
by 3 foot thick water tanks, and unshielded on the top. 
Reactivity was controlled by the level of the heavy 
water, which was supplied from a storage tank by an 
electrically driven pump. As a safety feature, the pump 
was controlled by a timer that required the pump to be 
restarted by a pushbutton switch every 10 seconds or 
so. 

Cadmium coated plates suspended on cables 
between the reactor tank and the graphite reflector 
served as safety rods. The scram circuit was set to trip 
at a power of about 3 watts. 

At the time of the accident, two physicists were 
working on the top of the reactor, inserting foils into 
reentrant tubes. A technician raising the water level in 
the reactor with the pump control had instructions to 
stop at a water level predetermined to be many minutes 
of pumping below predicted criticality. 


One of the physicists asked the technician to bring a 
tool to the top of the reactor. Not wanting to lose time 
and in direct contravention of instructions, the techni¬ 
cian inserted a chip of wood into the pump control 
button so the timer would reset each time it ran out. He 
then went to the reactor top and became involved in the 
work being done there, while the heavy water level 
continued to rise. 

The reactor became critical and scrammed as 
designed. The pump was stopped automatically by an 
interlock in the scram circuit. The NRX reactor in the 
adjacent building was scrammed by sky shine radiation. 
Subsequent evaluations indicated that the ZEEP power 
level had coasted above the preset scram power level, 
perhaps by several factors of two. 

The three people on the reactor top each received 
doses in excess of the quarterly permissible limit and, 
perhaps, above the annual limit. 


3. Argonne National Laboratory, 2 June 1952 64 

U0 2 particles in plastic; water moderated; single excursion; 4 significant exposures. 


This accident occurred in a light water moderated 
core in which 6.8 kg of 235 U oxide were embedded in 
strips of polystyrene plastic. All but 0.5% of the oxide 
particles were 10 pm in diameter or less, the remainder, 
up to 40 pm in diameter. Seven strips of the plastic 
fastened to 6 zirconium strips (0.91 inches x 
0.110 inches x 43 inches) formed 1 standard fuel 
element. The core was roughly cylindrical and con¬ 
tained 324 fuel elements. The zirconium, fuel strips, 
and water occupied 60%, 7.71%, and 32.2%, respec¬ 
tively, of the core volume. 

The experiment in progress at the time of the 
accident consisted of making comparisons of the worth 
of central control rods of different design. The system 
became superprompt critical following an attempt 
(contrary to operating procedures) to replace the 
central control rod when the normal amount of water 
was in the core. Peripheral poison rods were in 
position but were inadequate to prevent criticality. 


The quenching mechanism for the excursion of 
1.22 x 10 17 fissions was the near uniform expansion of 
the plastic as the 10 pm particles became hot and the 
bubble formation in the neighborhood of the 40 pm 
particles. This forced most of the water out of the core, 
and the entire excursion was over about 0.6 seconds 
after the operator started raising the control rod. The 
maximum reciprocal period was nearly 100 s -1 , the 
maximum power was 1.7 x 10 8 watts, and the half¬ 
width of the power spike was 18.5 milliseconds. 

In this excursion, the core fuel elements were 
ruined, but no significant amount of fissile material 
was lost. The activity in the reactor room was above 
tolerance for about a day. The core elements were 
removed after 5 days, and decontamination was 
completed by a single application of detergent and 
warm water. Four persons received radiation doses of 
136, 127, 60, and 9, rep.* 


*See Appendix A. 
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4. Chalk River Laboratory, Atomic Energy of Canada, Ltd., 12 December 1952 63 ’ 65 ’ 66 ’ 67 

NRX reactor; natural uranium rods; heavy water moderated; graphite reflected; multiple excursions; 
insignificant exposures. 


The NRX reactor was a natural uranium, heavy 
water moderated system with the uranium rods cooled 
by a thin sheath of light water flowing between the 
aluminum clad fuel rod and a slightly larger concentric 
aluminum cylinder. The heavy water moderator 
reduced the neutron energy enough that the light water 
coolant served as a poison. 

Through a very complicated series of operator 
errors and electrical and mechanical safety circuit 
failures, the reactor was forced to be supercritical by 
about 60 0. Initially the power increased rapidly but, 
because of a slowly moving control rod, the reactor 
gave every indication of leveling off at a power of 
about 20 megawatts. Normally this would have been a 
high but tolerable power and, very likely the situation 
would have been controllable if the experiments 
underway had not required reduced the light water 
cooling flow for several of the fuel rods. At a power of 


about 17 megawatts, the cooling water commenced to 
boil in those channels with reduced flow. This auto- 
catalytic action (the light water was effectively a 
poison) increased the reactivity by about 20 0 and the 
power rose again with a period estimated to be 
between 10 and 15 seconds. When the power reached 
60 to 90 megawatts, the heavy water moderator was 
dumped and the excursion stopped. 

The reactor power was greater than 1 megawatts for 
no more than 70 seconds, and the total energy release 
has been estimated at 4,000 megajoules, or about 
1.2 x 10 20 fissions. The core and calandria (fuel 
element support structure) were damaged beyond 
repair. Some 10 4 Curies of long lived fission products 
were carried to the basement by a flood of 10 6 gallons 
of cooling water. Personnel irradiations were appar¬ 
ently low; the reactor was restored to operation in 
slightly more than a year. 


5. National Reactor Testing Station, 22 July 195469 , 70 , 71,72 

BORAX reactor; aluminum-uranium alloy, water moderated; single excursion; insignificant exposures. 


The National Reactor Testing Station was located 
near Idaho Falls, Idaho in the United States. This 
excursion was an accident only in the sense that it was 
larger than expected. The BORAX-I reactor had been 
built as a temporary affair; steady state and transient 
studies were regarded as complete; and it was decided 
that the reactor should be forced onto a short period 
transient to obtain the maximum amount of experimen¬ 
tal information before it was dismantled. The excess 
reactivity was chosen to produce a fission yield such 
that about 4% of the fuel plates would melt. 

The BORAX-I reactor consisted of 28 MTR-type 
fuel elements moderated by light water. Each element 
contained 18 fuel plates 2.845 inches x 
0.060 inches x 24.6 inches consisting of aluminum- 
uranium alloy clad with about 0.020 in. of aluminum. 
The total uranium inventory was 4.16 kg, and the 
whole core was in a semi-buried tank 4 feet in 
diameter and 13 feet high. 

It had been estimated from earlier controlled prompt 
excursions that about 4% excess k would put the 
reactor on a period between 2.0 and 2.5 milliseconds 
and that the resulting excursion would release about 
80 megajoules of fission energy. To perform this 
experiment a larger than usual fuel loading and a more 
effective central control rod were required. 

The excursion and associated steam explosion 
following rapid ejection of the control rod completely 
disassembled the reactor core and ruptured the reactor 


tank (Figure 59). Very extensive melting of the fuel 
plates occurred; some elements remained in the tank 
and small pieces were found up to 200 feet away. 

An example of the force of the explosion was the 
carrying away of the control rod mechanism. This 
mechanism, which weighed 2,200 pounds, sat on a 
base plate, about 8 feet above the top of the reactor 
tank. Except for the base plate, about 4 feet square, the 
top of the 10 foot shield tank was essentially unob¬ 
structed. The force of the explosion plus the impinge¬ 
ment of water and debris on the base plate tore the 
plate loose from its coverage and, as revealed by high 
speed movies, tossed the mechanism about 30 feet into 
the air. 71 

The total energy release was 135 megajoules instead 
of the predicted 80 megajoules or, assuming 180 MeV 
deposited per fission, 4.68 x 10 18 fissions. This energy 
is equivalent to that contained in about 70 pounds of 
high explosive, but it has been estimated that between 
6 and 17 pounds of high explosives would produce 
comparable damage. The minimum period was 
2.6 milliseconds, and the maximum power was about 
1.9 x 10 10 watts. It is apparent that the nuclear excur¬ 
sion was completed before the steam explosion 
destroyed the system. 

In this excursion, the reactor was destroyed but, 
because of the remote site, physical damage was 
limited to the reactor. No personnel were exposed to 
radiation. 
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Figure 59. The destructive excursion in BORAX, 22 July 1954. 


6. Boris Kidrich Institute, 15 October 1958* 7374 

Unreflected , D 2 0-moderated, natural uranium assembly , unshielded . 


The Boris Kidrich Institute was located in Vinca, 
Yugoslavia. The accident occurred with an unreflected 
matrix of natural uranium rods moderated by heavy 
water. The aluminum clad rods were 25 mm in 
diameter and 2.1 m long; the total core uranium mass 
was 3,995 kg in a volume of 6.36 m 3 . Two cadmium 
safety rods were installed but not interlocked with the 
flux recorder. The liquid level was normally used to 
control the system reactivity (critical level, 1.78 m). 

At the time of the accident a subcritical foil count¬ 
ing experiment was in progress. To obtain as much 
activation of the foils as possible, it was desired to 
raise the multiplication to some high but still subcriti¬ 
cal level. This was done by raising the heavy water in 
the tank in a series of steps. On the last step, two of the 
BF 3 chambers performed as before—leveling off at a 
higher signal level, but the third behaved erratically 


and was disconnected. After the assembly had been at 
this D 2 0 level about 5 to 8 minutes, one of the experi¬ 
menters smelled ozone and realized that the system 
was supercritical at some unknown power level. The 
cadmium safety rods were used to stop the excursion. 

Later investigation showed that both of the detecting 
chambers that were believed to be working properly 
had reached saturation and were reading a constant 
maximum value even though the power level was 
rising steadily. 

Radiation doses were intense, being estimated at 
205, 320, 410, 415, 422, and 433 rem. 74 Of the six 
persons present, one died and the other five recovered 
after severe cases of radiation sickness. The critical 
assembly withstood the energy release of 
80 megajoules (about 2.6 x 10 18 fissions) with no 
reported damage. 


*We are indebted to Dr. T. J. Thompson for first reporting the correct sequence of events. Some of the details of this incident are 
taken verbatim from his discussion. 
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7. Centre dEtudes Nucleaires de Saclay, France, 15 March I960 2627 

U(1.5)0 2 rods, water moderated and reflected ' assembly; single excursion; insignificant exposures. 


The Alize critical assembly was a water reflected 
and water moderated system using, in this case, U0 2 
rods as fuel in which the uranium was enriched to 
1.5%. The rods were 1 m long and 10 mm in diameter 
with the total U0 2 mass equal to 2.2 tons. 

The experiment in progress at the time of the 
accident required a stable positive period at a very low 
power. To accomplish this, the critical rod configura¬ 
tion was found experimentally and the rod position 
required for the necessary period was calculated. After 
allowing for the decay of delayed neutron precursors, 
the rods were withdrawn to the predetermined position. 
However, for reasons unknown, the operator then 


completely withdrew a rod that previously was not 
fully out. This placed the system on a period of about 
1/4 second. 

The subsequent power excursion created 3 x 10 18 
fissions, but the peak temperatures in the U0 2 were 
less than 550°C. The core was undamaged, and 
personnel radiation doses were trivial. 

It was deduced that the quenching action must have 
been a result of the 238 U Doppler effect. This judgment 
was substantiated by the Spert experiments with a 
similar core in which the uranium was enriched to 
4% (II-C.9). 


8. National Reactor Testing Station, 3 January 1961 74 75 

SL-1 reactor; aluminum-uranium alloy; water moderated; single excursion; three fatalities. 


The SL-1 reactor (originally known as the Argonne 
Low Power reactor) was a direct-cycle, boiling water 
reactor of 3 megawatts gross thermal power using 
enriched uranium fuel plates clad in aluminum, 
moderated, and cooled by water. Because the reactor 
was designed to operate for 3 years with little atten¬ 
tion, the core was loaded with excess 235 U. To counter¬ 
balance the excess of 235 U, a burnable poison ( 10 B) 
was added to some core elements as aluminum- 10 B- 
nickel alloy. Because the boron plates had a tendency 
to bow (and, apparently, to corrode, increasing reactiv¬ 
ity), some of them were replaced in November 1960 
with cadmium strips welded between thin aluminum 
plates. At that time the shutdown margin was estimated 
to be 3% (about 4 $) compared to the initial value of 
3.5% to 4%. The cruciform control rods, which tended 
to stick, were large cadmium sheets sandwiched 
between aluminum plates. The nuclear accident was 
probably independent of the poor condition of the core. 

After having been in operation for about 2 years, the 
SL-1 was shut down 23 December 1960 for routine 
maintenance; on 4 January 1961, it was again to be 
brought to power. The three man crew on duty the 
night of 3 January was assigned the task of reassem¬ 
bling the control rod drives and preparing the reactor 
for startup. Apparently, they were engaged in this task 
when the excursion occurred. 

The best available evidence (circumstantial, but 
convincing) suggests that the central rod was manually 
pulled out as rapidly as the operator was able to do so. 
This rapid increase of reactivity placed the reactor on 
about a 4 millisecond period; the power continued to 
rise until thermal expansion and steam void formation 


quenched the excursion. The peak power was about 
2 x 10 4 megawatts, and the total energy release was 
133 ± 10 megajoules. 

The subsequent steam explosion destroyed the reactor 
and killed 2 men instantly; the third died 2 hours later as 
a result of a head injury. The reactor building and 
especially the reactor room were very seriously contami¬ 
nated by the reactor water, which carried fission 
products with it. Initial investigations were hindered by 
the high radiation field (500 to 1000 R/h) in the reactor 
room. In spite of the large radioactivity release from the 
core, very little escaped from the building, which was 
not designed to be airtight. 

In many respects this reactor excursion resembled 
that of the BORAX and Spert destructive experiments. 
Each of these, and especially Spert (II-C.9), was 
instrumented to follow just such an excursion. W. Nyer 75 
notes that the crucial parameter is the energy density in 
the core. This is larger for the SL-1, but not grossly so, 
being 12% more than BORAX and 60% more than 
Spert. The prompt alpha (reciprocal period) for SL-1 
seems to have been slightly lower. The steam explosion 
caused considerable damage in all three power tran¬ 
sients, especially in BORAX and SL-1. In SL-1 the core 
was enclosed and the water apparently was accelerated 
upward more or less as a single slug. The energy 
acquired by the water was sufficient to lift the entire 
reactor vessel some 9 feet before it fell back to its 
normal position. 

In the Spert experiments, the steam explosion 
followed the nuclear power spike by 15 milliseconds. It 
is not known if such a delay occurred following the SL-1 
power transient. 
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9. National Reactor Testing Station, 5 November 1962 76 

Assembly of Spert fuel elements; single non-nuclear excursion; insignificant exposures. 


The accident occurred with a small test assembly 
designed to investigate the transient behavior of water 
moderated and cooled plate type reactors. The Spert 
fuel consisted of plates of highly enriched uranium 
alloyed with aluminum and clad with the same 
material. Previous test programs had produced data for 
transients whose initial period exceeded 8 millisecond. 
These experiments were nondestructive, having 
resulted in only minor fuel plate distortion. However, 
some data of a destructive nature was obtained for a 
2.6 millisecond period in the 1954 BORAX-I test that 
resulted in an explosion that destroyed the reactor. 
These experiments were therefore designed to investi¬ 
gate the transition from essentially non-damaging to 
destructive excursions. 

After completion of a long experimental program, 
two tests were conducted resulting in periods of 5.0 
and 4.6 milliseconds. These resulted in some plate 
distortion and some limited fuel melting. The transient 
behavior was regarded as a reasonable extrapolation of 
data from earlier experiments having longer periods. 
There was no indication that further extrapolation was 
not valid. 

In the final test with a 3.2 milliseconds period 
(energy release 30.7 MJ) all 270 plates showed melting 
to some degree, with the average molten fraction about 


35%. The performance of this test, from the nuclear 
point of view, was very close to predicted. Evidently 
the nuclear characteristics of the shutdown were 
essentially identical to the earlier transients and 
involved fuel and moderator thermal expansion and 
boiling of water. However, about 15 milliseconds after 
the nuclear transient was terminated, a violent pressure 
surge resulted in total destruction of the core. This is 
attributed to a steam explosion caused by rapid energy 
transfer from the molten fuel to the water moderator. 
Fuel, water, and core structure were violently ejected 
from the vessel in which the experiment took place. 

This experiment was instrumented to measure the 
activity of any fission products that might be released, 
even though no violent excursion was expected. The 
measurements showed that about 7% of the noble 
gases produced during the transient escaped to the 
atmosphere. The roof and some of the siding of the 
reactor building had been removed prior to the test, so 
the building provided only limited confinement. 
Neither solid fission products nor any radioiodines 
were found in the atmosphere. 

Based on the detection sensitivity of the instrumen¬ 
tation and the lack of any indicated presence of iodine, 
it was established that less than 0.01% of the 
radioiodines produced had escaped to the atmosphere. 


10. Mol, Belgium, 30 December 1965 2627 

VENUS assembly; 7 % enriched U0 2 rods in H 2 0-D 2 0; single excursion; one serious exposure. 


VENUS was a tank-type, water moderated, 
critical assembly machine used for experiments 
apropos of the Vulcan reactor. This was a “spectral 
shift” reactor, so called because the initial moderator 
of D 2 0 could be diluted with H 2 0 to soften the 
spectrum and maintain reactivity as the fissile 
material was consumed. For the experiments in 
progress, the composition of the moderator and 
reflector was 70% H 2 0 and 30% D 2 0; the reflector 
extended 0.3 m above the top of the core. The height 
and diameter of the core were about 1.6 m. The fuel 
was U0 2 in the form of pelleted rods, the total mass 
of U0 2 was 1200 kg, and the 235 U enrichment 
was 7%. 

The primary reactivity control was by motion of 
poison rods (8 safety rods and 2 control rods); 8 
additional absorbing rods were available for manual 
positioning in the core. Just before the accident, all 
safety rods were in, a control rod was in, 7 manual 


rods were in, and a control rod was being inserted; 
the reactor was subcritical by 1 safety rod and 1 
control rod. 

To perform an experiment with a new rod 
pattern, the operator of the reactor decided to 
decrease reactivity by inserting the last manual rod, 
waiting until the second control rod was fully 
inserted. Then, as the reactor should have been 
subcritical by 1 safety rod, 2 control rods, and 1 
manual rod, a different manual rod located near the 
last one inserted could be pulled out of the core and 
the reactor made critical again by lifting two safety 
rods. 

Such a program required a person to insert 
1 manual rod and extract another. The operator did 
not take into account a rule written into the safety 
report of the reactor, i.e., that no manipulation of a 
manual rod in the core should be performed without 
first emptying the vessel. He gave a written order to 
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a technician prescribing the loading of a manual rod 
followed by the unloading of another one. The techni¬ 
cian did not wait until the moving control rod reached 
its bottom position and started the manipulation in the 
wrong order. He first extracted a manual rod instead of 
first inserting the other. 

During the extraction of the manual rod the reactor 
became critical. The technician had his left foot 
projecting over the edge of the tank and resting on a 
grating that was about 50 mm above the reflector; his 
right foot and leg were somewhat behind him and 
partly shielded. He noticed a glow in the bottom of the 
reactor, immediately dropped the control rod, and left 
the room. 


The energy release was 4.3 x 10 17 fissions and, 
apparently, the excursion was stopped by the falling 
manual rod, although the scram may have been 
speeded up by a combination of the Doppler effect and 
emptying of the vessel, which was automatically 
“provoked.” This is uncertain. 

No steam was created, no damage was done to the 
fuel, and there was no contamination. The technician 
received a severe radiation dose, primarily gamma- 
rays. Eight days later and after 300 measurements in a 
phantom, rough estimates were that the dose to his 
head was 300 to 400 rem, to his chest 500 rem, and to 
his left ankle 1,750 rem. At the end of his foot the dose 
approached 4,000 rem. Medical treatment of the 
patient was successful, except that the left foot had to 
be amputated. 


11. Kurchatov Institute, 15 February 1971 77 

U(20)O 2 fuel rod , iron and beryllium reflected , assembly; multiple excursions; two serious exposures. 


Experiments to evaluate the relative effectiveness of 
iron and metallic beryllium as a reflector on a power 
reactor core were in progress at the critical experiment 
facility, SF-7. The core measured 1,200 mm high and 
1,000 mm in diameter and held 349 fuel rods. Critical¬ 
ity was obtained by adding water to the core and 
immersing the fuel rods. The safety rods consisted of a 
lattice of boron carbide rods that could be inserted 
throughout the core to compensate for the operative 
reactivity margin. The boron carbide lattice did not 
cover the three outer rows of fuel rods. The fuel rods 
were enriched to about 20% 235 U (typical of ice¬ 
breakers). 

The first stage of the experiment consisted of a core 
configuration in which the neutron flux was non- 
uniformly distributed along the core radius. Measure¬ 
ments showed that the completely water flooded core 
with the boron carbide safety rod lattice inserted was 
deeply subcritical (-10%), and the reactivity increased 
only slightly (+0.8%) after replacing the radial iron 
reflector with one of beryllium. 

The second stage of the experiment consisted of a 
core configuration in which the neutron flux was 
uniformly distributed along the core radius. One 
hundred forty-seven fuel rods with the maximum 
loading of burnable neutron absorber were inserted 
into the central part of the core that was heavily 
poisoned by a safety rod lattice. Two surrounding rows 
of rods (118 rods) containing less absorber, in this case 
a burnable poison, were then added. The outermost 
row (84 rods) did not contain burnable neutron 
absorber material. 


The second stage of the experiment, according to 
the plan, began with the beryllium reflector in place 
because it was in place at the end of the first stage. 
However, criticality calculations for this core configu¬ 
ration were performed only for an iron reflector. Based 
on results of the comparison between beryllium and 
iron reflectors for the first configuration, the supervisor 
of the experimental team determined that substituting 
iron for beryllium would not result in any considerable 
increase in reactivity. Therefore, additional calculations 
were not performed. 

The core configuration with the beryllium reflector 
was assembled in the dry critical facility tank and left 
for the night. The next morning, the supervisor entered 
the facility control room (Figure 60) and without 
waiting for the arrival of the control console operator 
and the supervising physicist, switched on the pump, 
and began adding water to the critical assembly tank. 
The supervisor considered the system to be far from 
critical. The control equipment was switched on, but 
the neutron source had not been placed in the critical 
assembly, and the control rods were not actuated. 

A scientist arrived from Gorky who was training at 
the SF-7 experimental facility and was standing near 
the critical assembly tank discussing the experiment 
with the supervisor. Suddenly they saw a blue lumines¬ 
cence reflecting from the ceiling and heard a rapidly 
increasing signal from an audible neutron flux indica¬ 
tor. They thought that something had happened in 
another facility and ran from the critical assembly 
room. Other workers who were in the room also left. 
The manager of the facility was informed of the event. 
The manager and a dosimetry technician tried to enter 
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Figure 60. Photograph of the SF-7 control and experimental rooms where the first accident occurred. 
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the room to drain the water out of the critical assembly 
tank but the radiation levels and the steam that filled 
the room made it impossible to approach the control 
console. The pump had continued adding water to the 
tank. After 5 to 7 minutes, the electricity supply was 
shut off at the substation and the pump ceased. 

Later assessments showed that about 50 pulses 
occurred. Since the neutron source was not in the 
critical assembly the core reached critical on prompt 
neutrons, a fast pulse occurred, water boiled and 
splashed out of the tank, and the excursion terminated. 
When the water was pumped to the critical level the 
process was repeated. Total energy release was 
-2 x 10 19 fissions with each event averaging about 
5 x 10 17 fissions. The rate of reactivity insertion was 
comparatively small (-0.15 (3 eff per second) so the fuel 
rod cladding did not rupture and the room was not 
contaminated. 

Three days later the water level was measured and 
found to be 560 mm from the core bottom, and the 
lattice was flooded. The difference between excess 
reactivity margins for a core with iron and beryllium 
reflectors was -10%. 

The supervisor and the scientist were injured during 
the accident. They each received -1500 rem to their 
feet. Other personnel in the room were behind shield¬ 
ing and received much smaller doses. 


The two major causes of this accident were as 
follows: 

1) It was incorrectly judged that the reactivity worth of 
the beryllium reflector (calculations had not been 
performed) was essentially the same as the iron 
reflector (calculations had been performed). 

2) Serious violations of SF-7 operating requirements 
occurred: 

a) Action that could change the core reactivity 
should have been considered an experiment. The 
addition of water was an obvious change to the 
core reactivity and should not have been initi¬ 
ated without a full operating crew (scientific 
leader, supervising physicist, and the control 
console operator). 

b) Before initiating the experiment (adding water) 
all control equipment should have been tested, 
the neutron source should have been introduced 
into the core, and the safety rods should have 
been inserted. 

c) Any reactivity addition should have been done 
step-by-step. The parameter 1/M should have 
been plotted and extrapolated to the critical 
value after each step. 


12. Kurchatov Institute, 26 May 1971 7879 

U(90) fuel rod , water reflected ' assembly; single excursion; two fatalities; two serious exposures. 


This accident occurred in the SF-3 facility during an 
experimental program to measure critical masses 
formed by a certain type of highly enriched 
(-90% 235 U) fuel rods. These rods were very similar to 
those described in Reference 72. The critical number 
of fuel rods at various hydrogen-to- 235 U atom ratios 
was being determined. This ratio was changed by 
varying the pitch of the fuel rods within the lattice 
while preserving the hexagonal form of the cell. 

Table 12 gives the lattice pitch value and the corre¬ 
sponding number of rods, N. This highlights the rather 
sharp decline in the critical number of fuel rods as the 
pitch increases in the 7-9 mm pitch range. 


Table 12. Pitch Versus Critical Number of Rods 


Pitch, mm 

7.2 

9.5 

11.5 

14.4 

N (rods) 

1,790 

590 

370 

260 


Efforts were made to make the experiments as clean 
as possible with minimum perturbations in the system. 
The assembly consisted of a 20 mm thick Plexiglas 
base plate which supported the weight of a lattice of 
fuel rods, and 2 mm thick aluminum plates used to 
hold the end of the rods in position. Plexiglas was 
chosen since its hydrogen content is similar to water. 
The guiding devices for emergency protection and 
control rods were placed into the lateral reflector. The 
rod endings projected above the upper lattice about 
2 -3 mm. The construction was quite delicate and 
fragile. 

For each lattice pitch, a system containing consider¬ 
ably fewer rods than the estimated critical number was 
assembled in the dry critical assembly tank. This 
system was then flooded with water and reactivity 
measured until the water reflector above the rods was 
at least 200 mm. Fuel rods were added, a few at a time, 
until the system became critical. Procedures were 
followed step-by-step and the parameter 1/M was 
plotted and extrapolated to the critical value after each 
step. 
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Figure 61. Mockup of the accident configuration for the 26 May 1971 accident. 
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In the final experiment, the critical number of fuel 
rods with the smallest pitch (7.2 mm) was measured. 
This number was 1,790 and exceeded the minimum 
critical number of rods for an optimum pitch by 
approximately 7 times. 

After the experiment was finished, the supervisor of 
the experimental team ordered the insertion of all 
control and emergency protection rods and the neutron 
source was removed from the core. Four staff members 
entered the critical assembly compartment for exami¬ 
nation. The supervisor then ordered the water be 
removed through the fast dumping (emergency) valve. 

The water from the critical assembly tank could 
have been drained through the slow dumping valve in 
15 to 20 minutes or through the fast dumping valve in 
20 to 30 seconds. After the previous experiments, the 
water had been drained through the slow dumping 
valve. 

The plexiglas support plate almost completely 
covered the tank section, and the size of the gap 
between the plate edge and tank wall was less than the 
size of the fast dumping valve outlet. For this reason, 
upon initiating the fast dumping operation, the 
Plexiglas base plate sagged and the fuel rods fell out of 
the upper lattice plate (Figure 61). The fuel rods 
separated into a fan shaped array in which the pitch 
between the rods came close to optimum and the lattice 
went highly supercritical. The rate of reactivity 
insertion was calculated to have reached ~2 (3 eff /s. 


During the criticality accident, two peripheral rows 
of fuel rods were destroyed by the energy release. 
Fragments of these fuel rods resembled welding rod 
fragments. Water splashed out of the tank. The energy 
release in the burst, estimated from the core radioactiv¬ 
ity, was -5 x 10 18 fissions. This value is, in all prob¬ 
ability, universal for uranium-water systems in an open 
tank under conditions of rapid reactivity insertion. 
Excursions of this type are terminated due to fuel 
destruction or loss of water. 

Radioactive contamination of the critical assembly 
room was minimal and there was no contamination of 
the outer premises; however, the accident conse¬ 
quences were tragic for the personnel involved. A 
technician, who was close to the tank when the pulse 
occurred received a radiation dose of -6,000 rem and 
died 5 days after the accident. The supervisor received 
2,000 rem and died in 15 days. Two other staff 
members inside the critical assembly room received 
doses of 700 -800 rem. Physicians managed to save 
their lives but both suffered long term health effects. 

The construction of the critical assembly was the 
main cause of the accident. No calculations were 
performed for the components of the system and the 
construction as a whole. Improper and hasty actions by 
personnel during the final stage of the experiment also 
contributed to the cause of the accident. 


13. The RA-2 Facility, 23 September 1983 79 

MTR-type fuel element, water reflected, assembly; single excursion; one fatality, two significant exposures. 


The RA-2 Facility was located in Buenos Aires, 
Argentina. Control rods for this essentially zero power 
experimental reactor assembly were MTR elements in 
which 4 of the 19 fuel plates were removed and 
replaced by 2 cadmium plates. Just outside the fueled 
region (approximately 305 mm x 380 mm) was a 
graphite reflector approximately 75 mm thick. The 
large reactor vessel was filled with de-mineralized 
water during operations and was supposed to be 
drained during changes in fuel configurations when 
people were required to be present. 

The technician, a qualified operator with 14 years 
experience, was alone in the reactor room making a 
change in the fuel configuration. The moderator had 
not been drained from the tank, though required by 


procedures. Two fuel elements had been placed just 
outside the graphite, instead of being removed com¬ 
pletely from the tank. Two of the control elements, 
without the cadmium plates installed, were being 
placed in the fuel configuration. Apparently, criticality 
occurred as the second of these was being installed, 
since it was found only partially inserted. 

The excursion consisted of 3 to 4.5 x 10 17 fissions; 
the operator received an absorbed dose of about 
2000 rad from gamma-rays and 1700 rad from neutron. 
This exposure was highly non-uniform, with the upper 
right side of the body receiving the larger exposure. 
The operator survived for 2 days. Two people in the 
control room received doses of about 15 rad from 
neutrons and 20 rad gamma-rays. Six others received 
lesser doses, down to 1 rad, and 9 received less than 
1 rad. 
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D. MISCELLANEOUS SYSTEMS 

1. Los Alamos Scientific Laboratory, 11 February 1945 80 ’ 81 

The Dragon assembly; UH 3 pressed in styrex; single excursion; insignificant exposures. 


The Dragon assembly was the first fissile system 
designed to generate prompt power excursions and was 
probably the first reactor of any kind whose reactivity 
exceeded prompt criticality.* This was accomplished by 
intent on 18 January 1945; the temperature rise is 
quoted as 0.001 °C 74 and the yield (not quoted) can be 
estimated to have been about 2 x 10 11 fissions. 

The Dragon was made of enriched UH 3 pressed with 
a special plastic, styrex, into small cubes of average 
chemical composition UC 4 H 10 . The configuration for 
the final experiments, containing only 5.4 kg of this 
material, was diluted with polyethylene and reflected by 
graphite and polyethylene. 

The reactor was made prompt critical for about 1/ 
100 of a second by dropping a slug of the active 
material through a vertical hole in the remaining 
portion, which was stacked on a 3/8 inch steel table. 


The falling slug of active material was contained in a 
steel box, its path closely defined by four guides. 

Generally, the fission energy did not contribute to the 
quench of the excursion; the burst size was determined 
by the background fission rate and the stacking configu¬ 
ration on the table. Thus, the burst size could be varied 
by moving a reflector nearer the assembly or by increas¬ 
ing the background fission rate. Both techniques were 
often employed, and this may have been the case in the 
final experiment because the bursts were being made 
steadily larger. During the final excursion of about 
6 x 10 15 fissions, the UH 3 cubes became so hot that 
blistering and swelling occurred. The whole system had 
expanded about l/8th of an inch. 

In the final excursion, the core material was damaged 
but no active material was lost, there was no contamina¬ 
tion, and no one received any radiation. 


2. National Reactor Testing Station, 29 November 1955 8283 

EBR-1; enriched uranium fast breeder reactor; single excursion; insignificant exposures. 


Design of the EBR-1 fast neutron reactor was started 
in 1948 with the objectives of establishing possible 
breeding values and demonstrating the feasibility of 
cooling a metal fueled reactor with liquid metals. These 
objectives were met, and in early 1952, the plant fur¬ 
nished more than enough electrical power for the reactor 
and the reactor building; excess steam was blown to the 
condenser. 

The reactor core consisted of cylindrical, highly 
enriched uranium rods slightly less than 1/2 inch in 
diameter canned in stainless steel with a bonding of NaK 
between the rod and can. The total core mass of about 
52 kg of uranium was bathed in a stream of NaK, which 
served as a coolant. 

The final experiment was designed to investigate 
coefficients of reactivity and, in particular, to study a 
prompt positive power coefficient without coolant flow. 
To do this, the system was placed on a period of 60 
seconds at a power of 50 watts. About 3 seconds later the 
power was 1 megawatt, the period had decreased to 0.9 
seconds, and core temperatures were rising significantly. 
The signal to scram the system was given, but by error 
the slow moving motor driven control rods were actuated 
instead of the fast acting scram—dropping part of the 


natural uranium blanket under gravity—as had been 
done to conclude similar experiments. This change in 
reactivity caused a momentary drop in power, but was 
inadequate to overcome the natural processes (very 
slight bowing inward of the fuel elements) adding 
reactivity to the system. After a delay of not more than 2 
seconds, the fast scram was actuated, both manually and 
by instruments, and the experiment completed. 

It was not immediately evident that the core had been 
damaged. Later examination disclosed that nearly 
one-half the core had melted and vaporized NaK had 
forced some of the molten alloy into the reflector. 
Theoretical analysis showed that the excursion was 
stopped by the falling reflector, after the power reached 
a maximum of 9 to 10 megawatt. The total energy 
release was close to 4.6 x 10 17 fissions. The theoretical 
analysis was carried further in an attempt to determine 
if the core would have shut itself off in a non- 
catastrophic manner. The conclusion was that the 
energy release could have been nearly 2.5 times the 
observed yield but would not have resulted in violent 
disassembly of the core. 

During this accident no one received more than 
trivial radiation from airborne fission products, and 
direct exposure was essentially zero. 


*R. Feynman pointed out the similarity of the procedures used in these experiments to tickling the tail of a dragon, thus it has 
been called the “Dragon Experiment.” The name is often applied to the class of prompt-burst experiments where reactivity is 
added and subtracted mechanically and where quenching mechanisms dependent upon the fission energy released do not contrib¬ 
ute significantly to the shutdown process. 
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3. Los Alamos Scientific Laboratory, 3 July 1956 4345 

Honeycomb critical assembly; U(93) metal foils moderated with graphite; single excursion; insignificant 
exposures. 


The machine in which this excursion occurred is 
typical of several then in existence. The Los Alamos 
machine consisted of a large matrix of 576 square 
aluminum tubes, 3 inches x 3 inches x 6 feet, split down 
the middle with one-half of the matrix moveable on 
tracks. The “honeycomb” in the disassembled state is 
shown in Figure 62. Generally, the facility had been used 
to simulate design features of complicated reactors 
because of the versatility in arrangements of uranium foil 
and various moderating materials. Inhomogeneous 
stackings in this and similar machines have the least 
inherent negative reactivity feedback of any critical 
assemblies in existence today. This conclusion stems 
from the apparent lack of any significant quenching 
mechanism, short of vaporizing the uranium foils, and 
the absence of a sufficiently fast acting scram mecha¬ 
nism. 


The stacking on 3 July 1956 consisted of 58 kg of 
enriched (93% 235 U) uranium in the form of 2 and 5 mil 
foils arranged between slabs of graphite with some 
beryllium reflector surrounding the core. The total mass 
of graphite was 1,139 kg. At the time, some changes had 
been made in the reflector and graphite moderator, and 
criticality was being approached too rapidly for routine 
measurements. While the cart was moving at about 
0.2 inch per second, the system became prompt critical, a 
burst occurred, and the scram system retracted beryllium 
control rods (reducing reactivity) and reversed the 
motion of the cart. The burst yield was 3.2 x 10 16 
fissions. 

Apparently this was a Dragon type excursion in that 
the excess reactivity was added and subtracted mechani¬ 
cally. There was no damage and no contamination. 
Because it was remotely controlled from a distance of 
1/4 of a mile, no one received any radiation. 



Figure 62. The LASL Honeycomb assembly machine. The movable section (right) is in the withdrawn position and the 
aluminum matrix is only partially loaded. 
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4. National Reactor Testing Station, 18 November 1958 84 

HTRE Reactor; instrumentation failure; single excursion; insignificant exposures. 


The High Temperature Reactor Experiment (HTRE 
No. 3) power plant assembly was a large reactor (core 
diameter 51 in., length 43.5 in.) with nickel- 
chromium-U0 2 fuel elements, hydrided zirconium 
moderator, and beryllium reflector. The experimental 
objective was to raise the power to about 120 kilowatts, 
about twice that attained earlier in the day. This was 
done by manual control until about 10% of desired 
power was reached. At that point, control shifted to a 
servomechanism programmed to take the reactor 
power to 120 kilowatts on a 20 second period. When 
about 80% of full power was attained, the flux, as 
shown on the power level recorder, began to fall off 
rapidly and the servosystem further withdrew the 
control rods. The power indication, however, did not 
increase but continued to drop. This situation existed 
for about 20 seconds when the reactor scrammed 
automatically; within 3 seconds the operator took 


action that also activated the scram circuit. It is thought 
that the automatic scram was triggered by melting 
thermocouple wires. The primary cause of the accident 
was a drop in the ion collecting voltage across the 
detection chamber of the servosystem with increasing 
neutron flux. This behavior was, in turn, caused by the 
addition to the wiring of a filter circuit designed to 
reduce electronic noise from the high voltage supply or 
its connecting cable. Thus, this accident appears to be 
unique, as it was due solely to instrumentation. 

In the nonviolent power excursion of about 
2.5 x 10 19 fissions, all core fuel elements experienced 
some melting; only a few of the zirconium hydride 
moderator pieces were ruined. The melting of fuel 
elements allowed a minor redistribution of fuel, 
decreasing the reactivity by about 2%. Some fission 
product activity was released downwind, but personnel 
radiation doses apparently were negligible. 


5. Los Alamos Scientific Laboratory, 11 December 1962 

Zepo critical assembly; 235 U foils, graphite moderated; single excursion; insignificant exposures. 


The critical assembly consisted of a large cylindri¬ 
cal enriched uranium-graphite core on a lift device and 
a stationary platform holding a reflector of graphite 
and beryllium into which the core was raised. Most of 
the 235 U was placed in the graphite in the form of thin 
foils, therefore the excursion characteristics should be 
similar to those of the honeycomb assembly. The 
experiment was concerned with measurements of the 
axial fission distribution, which was perturbed from its 
normal value by an end reflector of layers of graphite 
and polyethylene. For this reason, some fresh 235 U 
foils had been placed in the assembly to obtain a 
reasonably precise value of the fission energy release. 


The crew assumed the assembly had been run and 
checked the previous day; however, this was not the 
case. The system became critical with the core in 
motion upward. The instrumentation scrammed the 
assembly when the power was about 200 watts. Before 
the lift could coast to a stop and start down, the system 
reactivity exceeded prompt criticality by about 12 0. 
Peak power was about 1 megawatt; maximum alpha 
was 40 s -1 ; and the yield was 3 x 10 16 fissions. No 
damage was done and personnel radiation doses were 
not measurable. The laboratory was entered within 
30 minutes. 


106 



III. POWER EXCURSIONS AND QUENCHING MECHANISMS 


The study and understanding of initiating events and 
shutdown mechanisms associated with criticality 
accidents offer potential for limiting the frequency and 
consequences of such untoward events. Although more 
fatalities have been associated with critical experiment 
and small reactor accidents (12) than with processing 
of fissile material (9), greater visibility seems to be 
associated with the safety of processing activities. 
Perhaps this is because of the larger number of 
individuals exposed in processing plants, the larger 
economic impact of facility shutdown, and the recogni¬ 
tion of a degree of assumed risk for systems operated 
at or near the critical state. 

The most obvious and significant characteristic of 
the criticality accidents that have occurred in process 
operations is that all but one of them involved solutions 
or slurries. This is attributable to several factors: the 
relatively small quantity of fissile material required for 
criticality when well moderated; the high mobility of 
solutions; the ease with which they adapt to changes in 
vessel shape; the potential for changes in concentra¬ 
tion; and, in several cases, the exchange of fissile 
material between aqueous and organic phases. Fortu¬ 
nately, along with the frequency of solution accidents, 
there is a good understanding of quenching mecha¬ 
nisms and of an inherent limitation to the fission power 
density in solutions. 

While there must be no implication of neglecting 
concern with solid fissile materials, safety interests 
may well concentrate on the behavior of solutions for 
which criticality control is more subtle. While today’s 
practices strongly encourage reliance on criticality 
safety features that are built into the process equip¬ 
ment, complete independence from administrative 
controls is extremely difficult to achieve. Studies of 
real and simulated accident mechanisms offer insight 
into features that can mitigate the consequences of the 
unlikely accident, should it occur. One such feature 
might involve the inclusion of an appropriately strong 
neutron source internal to a necessary, unfavorable 
geometry vessel that is to receive solution normally too 
lean to support criticality and not having a significant 
inherent neutron source. The CRAC 5 experiments 
clearly demonstrate the efficacy of such a source for 
limiting the size of first peaks of power excursions. 

In addition to the understanding gained from 
studying the process accidents and the reactor and 
critical assembly excursions involving solution 
systems, we derive much information from several 
series of experiments with controlled excursions in 
solutions. In the U.S. the KEWB 85 ’ 86 ’ 87 (Kinetic 
Experiments on Water Boilers) series is of interest, 
while the CRAC experiments performed by the Service 


d’Etudes de Criticite of the Commissariat a l’Energie 
Atomique have direct applicability to estimates of 
accident consequences. These programs, which 
involved solutions of highly enriched uranium, are 
supplemented by a series of measurements at Los 
Alamos using the SHEBA assembly. This assembly is 
fueled with a 5% enriched uranium solution, that 
provides information on dose rates near excursions in 
systems of lower enrichment. 88 Analysis of data from 
KEWB and CRAC has led to relatively simple com¬ 
puter codes that follow the early transient behavior 
well and rely on thermal expansion and the formation 
of radiolytic gas for the shutdown mechanisms. 

Transient behavior in moderated solid cores has 
been studied in the SPERT 89 ’ 90 ’ 91 and TRIGA 92 ’ 93 
experimental programs, while the very fast transients 
in simple, unmoderated metal systems are well 
understood as a result of studies of Godiva and similar 
fast burst reactors. 

The quenching actions manifest in the above 
mentioned experimental studies and which have 
terminated many of the accidental excursions, include 
thermal expansion, boiling, 238 U Doppler effect , and 
radiolytic gas bubble formation. The order here is of no 
importance, and not all are independent. In addition, in 
some situations, more than one mechanism contributes 
to quench or shutdown the excursion; in many cases, 
additional quenching actions set in when energy 
densities or temperatures reach some threshold value. 
The ramifications of this subject are varied and 
numerous, but the simplest and most generally 
applicable case is that of the energy model 95 ’ 96 ’ 97 in 
which the change of reactivity is proportional to the 
release of fission energy. 

For the special case of a step increase in reactivity, 
Ak 0 , we can write 

A k(t) = A k 0 - bE(t) (1) 

where E(t) is the fission energy released to time t and b 
is a constant characteristic of the system. With this 
assumption, the reactor kinetic equations have been 
coded for numerical solution by use of digital comput¬ 
ers. Such codes exist in many laboratories; the results 
quoted here are from the Los Alamos RTS Code. 98,99 
Figure 63 illustrates a series of computations for 
hypothetical systems in which the step increase of Ak 
is 1.20 $ relative to delayed criticality, the value of b is 
constant, and the neutron lifetime, /, is varied from 10' 8 
to 10" 4 seconds. The power and reactivity traces for the 
short neutron lifetime cases are characteristic of 
prompt excursions in fast reactors. The very sharp rise 
and fall in power is called the spike, and the relatively 
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Figure 63. Energy model computation of power and energy release vs time. The initial reactivity is 1.2 $ above 
delayed critical. Neutron lifetime values are 10 -8 , 10 6 , and 10' 4 seconds. The bottom panel shows the corresponding 
curves of reactivity vs time. 


constant power following the spike is the plateau. 
During the spike, the reactivity changes by 2 Ak 0 —that 
is, it reflects about prompt criticality. The characteris¬ 
tics of such spikes are established almost entirely by 
the prompt neutrons. The traces for 1= 10" 4 (simulating 
a solution system or a moderated reactor) do not show 
the reflection about prompt criticality, and there is no 
well-defined plateau following the spike. The time 
scale is of the order of the decay times of the shorter 
delayed neutron precursor; the effects of these neutrons 
cannot be ignored. 

Figure 64 illustrates comparable data for a step 
increase in reactivity of 1.0 $. The time history of the 
reactivity and power in this case is quite different and 
is typical of excursions in the delayed critical region. 
The time scale is much extended, allowing the possi¬ 
bility of mechanical devices shutting off the transient; 


power excursion peaks are broader; and the reactivity 
now attempts to reflect about delayed criticality. It 
should be noted that the implicit assumption of no heat 
loss from the system cannot be realized in practice. 

Any such loss of energy would result in power values 
greater than those plotted. 

Some of the results shown in Figures 63 and 64 can 
be obtained analytically. For sufficiently large step 
increases in reactivity above prompt criticality, the 
delayed neutrons may be ignored and the kinetic 
equations integrated to give the total excursion yield.* 

dE/dt = 2 Ak p /b (2) 

where A k p is the step increase relative to prompt 
criticality. The half-width of the spike is given by 


A similar result can be obtained for the delayed critical region, but the nonadiabatic behavior vitiates the result. 
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Figure 64. Energy model computation of power vs time. The initial reactivity is 1.0 $ above delayed critical. Neutron 
lifetime values are 10' 8 , 10 6 , and 10' 4 seconds. The bottom panel shows the corresponding curves of reactivity vs 
time. 


t ]/2 = 3.52 l/Ak p ( 3 ) 

where l = the neutron lifetime and the maximum power 

dm tmax = 2 Uc p y 3.5 bl ( 4 ) 

The experimental systems that have been inten¬ 
sively studied and that exemplify the data in Figures 63 
and 64 are the Godiva, KEWB, and SPERT reactors, 
and the CRAC experiments. 

Godiva I and II were near solid uranium (93% 235 U) 
metal critical assemblies, pressed into service as 
irradiation facilities. At a few cents above prompt 
criticality, controlled prompt excursions provide an 
excellent experimental picture to complement the 
curves of Figures 63 and 64. The prompt negative 
temperature coefficient of reactivity of about 
4.3 x 10 3 $/°C (depending on the model) arises from 
thermal expansion and is directly related to the 


deposition of fission energy. The transient proceeds so 
rapidly that no heat is lost from the system. When the 
step change of reactivity is increased to 4 or 5 0 above 
prompt criticality, a new effect sets in. The power rises 
to such high values that the thermal expansion lags the 
energy deposition and the simple ratio of E and Ak in 
Eq. (2) is no longer true. At still higher step changes, 
the energy release becomes proportional to the square 
and eventually to the cube of the initial excess reactiv¬ 
ity. Structural damage from shocks commences at 10 
or 11 0, thus providing a limit for planned repetitive 
bursts. 

The transient behavior of solution systems has been 
studied with the two KEWB reactors. The KEWB-A 
core was a 13.6 i stainless steel sphere containing 
11.5 i of highly enriched U0 2 S0 4 solution; the 
reflector was thick graphite. This reactor provided a 
means of studying transients in solution systems during 
which the period was as short as 2 milliseconds. The 


109 





KEWB-B core was designed specifically to extend 
these measurements to a period of 1 millisecond. It 
was cylindrical and, during the transient experiments 
(up to about 5.2 $ above prompt criticality), contained 
18 £ of U0 2 S0 4 solution. 

In the KEWB systems, two quenching mechanisms 
seem to be dominant over a wide range of excursions. 
The first of these is the rise in neutron temperature and 
thermal expansion as the core temperature rises, 
resulting in a prompt temperature coefficient equal to 
-2 0/°C at 30°C. This effect is sufficient to account for 
the observed yield of excursions starting near prompt 
criticality, but is inadequate for more violent transient 
experiments. The second quenching mechanism is 
bubble formation. 100 The available evidence supports 
the contention that during the spike, void space, 
consisting of many very small bubbles (microbubbles) 
with internal pressures of from 10 to 1000 atmo¬ 
spheres, is created by the fission process. The bubbles 
later coalesce and leave the system, giving the ob¬ 
served gas production coefficient of about 4.4 £/ MJ. 

Growth of these microbubbles seems to involve the 
repeated interaction between fission fragments and 
existing microbubbles from earlier fissions. Thus, a 
quenching mechanism proportional to the square of the 
energy release can be invoked. This model is success¬ 
ful in describing the solution transients, notwithstand¬ 
ing imprecise knowledge of the manner in which the 
bubbles form and grow. 

While the KEWB, SPERT, and TRIGA programs 
were largely oriented toward reactor safety, the CRAC 
studies were conceived and conducted to further an 
understanding of process accidents. Transients were 
stimulated in cylindrical vessels of 300 and 800 mm 
diameter with highly enriched uranium solutions 
having concentrations from 48.2 g/ i to 298 g/G In 
most experiments, solution was added to a cylinder at a 
constant rate until the height required for criticality 
was substantially exceeded. Some experiments used a 
neutron source of sufficient size to initiate the excur¬ 
sion as soon as the system achieved criticality, while 
the absence of such a source in others permitted the 
system to become superprompt critical prior to 
initiation and resulted in higher spike yields. 

The magnitude of the spike yield correlated well 
with the rate of reactivity addition when a source was 
present. For periods shorter than 10 milliseconds, the 
specific peak power was found to vary as the reciprocal 
period to the 3/2 power, which is in agreement with 
predictions based on the KEWB results. 


The CRAC program also provides helpful guidance 
regarding dose rates to be expected near unshielded 
solution excursions. For the 300 mm cylinder the 
exposure at 4 m from the surface of the vessel was 
about 2 x 10" 15 R/fission and for the 800 mm cylinder 
about 5 x 10" 16 R/fission. 

SPERT-1 reactor cores (heterogeneous, moderated, 
and reflected by water) 99 were of two general types. 
The first had fuel in the form of MTR type aluminum- 
uranium plates and cores designed to include the range 
from under moderation to the more hazardous region 
of over moderation. The second was composed of 
canned U0 2 rods about 10 mm in diameter. The 
uranium enrichment in these rods was 4%. 

Transients of the plate type reactors have been 
extensively studied since 1957 in an effort to solve 
core design problems and to find the limitations of 
such reactors. In particular, the period and energy 
release that can cause damage have been carefully 
determined. The shutdown of a power transient in the 
SPERT systems is more complicated than in simpler 
reactors. The model developed includes heating and 
density change of the water; heating of the core 
structure, including its own geometry changes and 
moderator expulsion from such changes; and finally, 
the boiling of water next to the plates and loss of 
moderator when water is expelled from the core. When 
the plate type core was destroyed, the reactivity, 
period, peak power, and fission energy release were 
essentially as predicted. The destructive steam pressure 
pulse starting some 15 milliseconds after completion of 
the nuclear phase was not foreseen and is thought to 
have been caused by very rapid transfer of energy from 
the near molten aluminum plates to the thin layer of 
water between the plates. The transfer, occurring 
before any significant volume change took place, and 
the resulting high pressure destroyed the core. This 
effect seems to have been involved in the destruction of 
BORAX, SPERT, and SL-1. 

The second type of SPERT-1 core 89 (4% enriched 
U0 2 rods in water) was tested during 1963 and 1964. 
Transient experiments with this core demonstrated the 
effectiveness of the Doppler mode of self shutdown 
and provide a basis for analysis of accidents in similar 
power reactor systems. Two attempts to destroy the 
core by placing the reactor on very short periods 
(2.2 and 1.55 milliseconds) failed. In each case, the 
Doppler effect was operative and additional quenching 
developed because one or two fuel pins (out of several 
hundred) cracked and caused local boiling. The pins 
were thought to have been saturated with water before 
the test. 
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APPENDIX A 

GLOSSARY OF NUCLEAR CRITICALITY TERMS 


An excellent glossary of nuclear criticality terms 
has been available for several years. Rather than 
reproduce this document in part in an attempt to focus 
on terminology specific to criticality accidents, we 
decided to reproduce the entire document in this 
appendix. In this way it is hoped that this accident 
report will also serve to further standardize the 
definitions that practitioners use. 

The following is a reproduction of Glossary of 
Nuclear Criticality Terms by Hugh Paxton, 
LA-11627-MS. 3 For additional reference material cited 
in this document, please see Reference 94. 

This is a glossary of terms generally encountered in 
the literature of nuclear criticality and criticality safety. 
Terms sometimes misused are emphasized. 

The following two terms are so basic and so 
intertwined that they call for special consideration 
inconsistent with the body of this glossary. Conse¬ 
quently, they are given this introductory position. 

critical, criticality: Proper use is generally consistent 
with the following definition from Webster’s New 
International Dictionary, Second Edition, Un¬ 
abridged: 

-ity.A suffix denoting state, condition, quality, or 
degree, used to form abstract nouns from adjectives, 
as in acidity, calamity. 

Thus, “delayed criticality” and “delayed critical 
state” are equivalent. “Critical” is not used as a 
noun but may seem so by implying “critical state” 
in legends of graphs or charts where space is at a 
premium. When the meaning of “critical” as an 
adjective may be misinterpreted, as in “critical 
terms” or “critical accidents,” “criticality” may be 
substituted for clarification. Use of “a criticality” 
for “a critical condition” or simply for “criticality,” 
as is sometimes heard, is unacceptable. See delayed 
criticality, prompt criticality. 

albedo, neutron: The probability under specified 
conditions that a neutron entering into a region 
through a surface will return through that surface. 

absorbed dose: The energy imparted to matter by 
directly or indirectly ionizing radiation per unit 
mass of irradiated material at the point of interest; 
unit of absorbed dose has been the rad and now in 
the International System of Units (SI) is the gray 
(Gy), 100 rad = 1 Gy. See rad, gray. 

absorption, neutron: A neutron-induced reaction, 
including fission, in which the neutron disappears as 
a free particle. The absorption cross section is 


designated c a . See capture, neutron; cross section, 
neutron. 

alarm system, criticality accident: A system capable 
of sounding an audible alarm after detecting neutron 
or gamma radiation from a criticality accident. See 
criticality accident. 

alpha particle: A helium-4 nucleus emitted during a 
nuclear transformation. 

beta particle: An electron of either positive or 
negative charge that has been emitted in a nuclear 
transformation. 

buckling: For our purposes, algebraic expressions that 
relate critical dimensions of various simple shapes 
(sphere, cylinder, or cuboid) of cores of the same 
composition and similar reflectors. For example, the 
known radius of a critical sphere may be used to 
obtain the radius and length of a corresponding 
critical cylinder. See core, reflector. 

burst, prompt: Usually refers to the pulse of energy 
from fissions produced by a prompt burst reactor. 
See prompt burst reactor, spike (in a prompt power 
excursion). 

capture, neutron: Neutron absorption not leading to 
fission or other neutron production. The capture 
cross section is designated c a . See absorption, 
neutron; cross section, neutron. 

cent: A unit of reactivity equal to one-hundredth of 
the increment between delayed criticality and 
prompt criticality (a dollar). See dollar, reactivity. 

chain reaction, fission: A sequence of nuclear fission 
reactions in which fissions are induced by neutrons 
emerging from preceding fissions. Depending on 
whether the number of fissions directly induced by 
neutrons from one fission is on the average less 
than, equal to, or greater than unity, the chain 
reaction is convergent (subcritical), self-sustaining 
(critical), or divergent (supercritical). 

core: That part of a fissile system containing most or 
all of the fissile material, as distinguished from an 
external reflector. See fissile system, reflector. 

critical infinite cylinder: For specified fissile 
medium and surrounding reflector, the infinitely 
long cylinder with a diameter that would be critical. 

critical infinite slab: For specified fissile medium and 
reflector on each surface, the slab of infinite lateral 
dimensions with a thickness that would be critical. 
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criticality accident: The release of energy as a result of 
accidentally producing a self-sustaining or divergent 
fission chain reaction. See reaction, fission. 

criticality safety: Protection from the consequences of 
a criticality accident, preferably by prevention of the 
accident. Encompasses procedures, training, and 
other precautions in addition to physical protection. 
See criticality accident. 

criticality safety standards: These standards describe 
criticality control practices for which there is 
industry-wide consensus. Consensus is established 
through procedures of the American National 
Standards Institute. 

cross section (a), neutron: The proportionality factor 
that relates the rate of a specified reaction (such as 
capture or fission) to the product of the number of 
neutrons per second impinging normally onto a unit 
area of a thin target and the number of target nuclei 
per unit area. It may be considered a small area 
assigned to each target nucleus, usually expressed in 
barns, i.e., 10" 24 cm 2 . See absorption, neutron; 
capture, neutron; fission, nuclear. 

decay, radioactive: A spontaneous nuclear transforma¬ 
tion in which particles or gamma radiation is emitted, 
in which x-radiation is emitted following orbital 
electron capture, or in which the nucleus undergoes 
spontaneous fission. See fission, nuclear; gamma 
radiation. 

delayed criticality: State of a fissile system such that 
k eff = 1, the steady-state condition. See multiplication 
factor. 

delayed neutrons: Neutrons from nuclei produced by 
beta decay following fission. They follow fission by 
intervals of seconds to minutes. See prompt neutrons. 

dollar: A unit of reactivity equal to the increment 
between delayed criticality and prompt criticality for 
a fixed chain-reacting system. See reactivity. 

dose equivalent: The absorbed dose multiplied by the 
quality factor and other less significant modifying 
factors, so that doses from different radiations (alpha, 
beta, gamma, slow neutron, fast neutron) can be 
summed to provide an effective total dose at the point 
of interest. The conventional unit of dose equivalent 
has been the rem, and now in the International 
System of Units (SI) is the sievert (Sv), 100 rem = 1 
Sv. See rem, sievert. 

dose rate: Absorbed dose delivered per unit time. See 
absorbed dose. 

excursion, nuclear: An episode during which the 
fission rate of a supercritical system increases, peaks, 
and then decreases to a low value. 


excursion, prompt-power: A nuclear excursion as the 
result of a prompt-critical configuration of fissile 
material. In general, a sharp power spike followed 
by a plateau that may be interrupted by smaller 
spikes. See excursion, nuclear; spike (in a prompt 
power excursion). 

excursion period (T): The reciprocal coefficient of t, 
where fission power in a nuclear excursion in¬ 
creases as e t/T before a quenching mechanism 
becomes effective. See excursion, nuclear; quench¬ 
ing mechanism. 

exponential column: A subcritical block or cylinder 
of fissile material with an independent neutron 
source at one end. Under appropriate conditions, the 
response of a neutron detector decreases exponen¬ 
tially with distance from the source. From the 
logarithmic rate of this decrease and lateral dimen¬ 
sions of the column, critical dimensions of an 
unreflected assembly of the material may be 
deduced. 

exposure: A measure of the ionization produced in air 
by x-rays or gamma radiation; the sum of electric 
charges on all ions of one sign in a small volume of 
air when all electrons liberated by photons are 
completely stopped, per unit mass of the air. Note 
that exposure refers to the environment, not 
absorbing material. The unit of exposure is the 
roentgen. See gamma radiation, roentgen. Alterna¬ 
tively, exposure is the incidence of radiation on 
living or inanimate material. 

favorable geometry: Geometric constraint of fissile 
material in which subcriticality is maintained under 
anticipated conditions. Examples are limited 
diameter of pipes intended to contain fissile solution 
or limited volumes of solution containers. 

fissile nucleus: A nucleus capable of fission by 
thermal neutrons, provided the effective neutron 

production cross section, vo y exceeds the effective 

absorption cross section, o a . The common fissile 
nuclei are 235 U, 239 Pu, and 233 U. See absorption, 
neutron; fission, nuclear. 

fissile system: A system containing 235 U, 239 Pu, or 
233 U nuclei and capable of significant neutron 
multiplication. See fissile nucleus; multiplication, 
subcritical. 

fission, nuclear: Disintegration of a nucleus (usually 
Th, U, Pu, or heavier) into two (rarely more) masses 
of similar order of magnitude accompanied by a 
large release of energy and the emission of neu¬ 
trons. Although some fissions take place spontane¬ 
ously, neutron-induced fissions are of major interest 
in criticality safety. The fission cross section is 
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designated G f , and V is the number of neutrons 
emitted per fission. See cross section, neutron. 

fission products: Nuclides produced by fission or by 
the subsequent radioactive decay of nuclides formed 
in this manner. See fission, nuclear; nuclide. 

fission yield, excursion: The total number of fissions 
in a nuclear excursion. See excursion, nuclear. 

fissionable nucleus: A nucleus capable of fission by 
neutrons of some energy. Fissionable nuclei include 
238 U, 240 Pu, and others with neutron-energy fission 
thresholds, in addition to those that are fissile. See 
fissile nucleus. 

gamma radiation: Short-wavelength electromagnetic 
radiation emitted in the process of nuclear transition 
or particle annihilation. 

gray (Gy): A unit of absorbed dose; 1 Gy = 1 
J/kg =100 rad. Adopted in 1976 by the Interna¬ 
tional Conference on Weights and Measures to 
replace the rad. See rad. 

hazard: A potential danger. “Potentially hazardous” is 
redundant. Note that a hazardous facility is not 
necessarily a high-risk facility. See risk. 

H/X: Conventionally, the atomic ratio of hydrogen to 
235 U, 239 Pu, or 233 U in a solution or hydrogenous 
mixture. Where there is more than one fissile 
species, the ratios must be specified separately. 

inhour: A unit of reactivity that when added to a 
delayed-critical system would produce a period of 
one hour; now seldom used. See reactivity. 

ionizing radiation: Any radiation consisting of 
directly or indirectly ionizing particles, photons, or 
a mixture of both. X-rays and the radiations emitted 
in radioactive decay are examples. See decay, 
radioactive. 

irradiation: Exposure to ionizing radiation. See 
exposure (alternative definition). 

isotopic code: Combined final digits of atomic 
number and atomic weight, such that 235 U, 239 Pu, 
and 233 U are represented “25,” “49,” and “23;” 

240 Pu, however, is called “410;” these appear in 
some documents but now are seldom used. 

linear energy transfer (LET): The average energy 
lost by an ionizing radiation per unit distance of its 
travel in a medium. A high LET is generally 
associated with protons, alpha particles, and 
neutrons, whereas a low LET is associated with x- 
rays, electrons, and gamma rays. See ionizing 
radiation. 

monitor, radiation: A detector to measure the level of 
ionizing radiation. A purpose may be to give 


information about dose or dose rate. See ionizing 
radiation. 

multiplication, subcritical: In a subcritical fissile 
system containing a neutron source, the equilibrium 
ratio of the total number of neutrons resulting from 
fission and the source to the total number of 
neutrons from the source alone. 

multiplication factor (k eff ): For a chain-reacting 
system, the mean number of fission neutrons 
produced by a neutron during its life within the 
system. It follows that k eff = 1, if the system is 
critical; k eff < 1, if the system is subcritical; and 
k e ff > 1, if the system is supercritical. 

neutron: An elementary particle having no electric 
charge, a rest mass of 1.67495 x 10" 24 grams, and a 
mean life of about 10 minutes. 

neutron poison: A nonfissionable neutron absorber, 
generally used for criticality control. See absorp¬ 
tion, neutron; capture, neutron. 

neutrons, epithermal: Neutrons of kinetic energy 
greater than that of thermal agitation, often re¬ 
stricted to energies comparable with those of 
chemical bonds. 

neutrons, fast: Neutrons of kinetic energy greater 
than some specified value, often chosen to be 
0.1 MeV (million electron volts). 

neutrons, thermal: Neutrons in thermal equilibrium 
with the medium in which they exist. At room 
temperature, the mean energy of thermal neutrons is 
about 0.025 eV (electron volt). 

nonfavorable geometry: See favorable geometry. 

nuclide: A species of atom characterized by its mass 
number, atomic number, and a possible elevated 
nuclear energy state if prolonged. 

oralloy (Oy): Introduced in early Los Alamos 
documents to mean enriched uranium (Oak Ridge 
alloy) ; now uncommon except to signify highly 
enriched uranium. See tuballoy. 

personnel monitor (radiation): A device for measur¬ 
ing a person’s exposure to radiation. Information on 
the dose equivalent of ionizing radiation to biologi¬ 
cal tissue is derived from exposures recorded by 
film badges, ionization chambers, and thermolumi¬ 
nescent devices; from whole-body counting and 
analysis of biological specimens; and from area 
monitoring and special surveys. 

photon: A quantum of electromagnetic radiation. 

prompt burst reactor: A device for producing 
nondestructive super-prompt-critical nuclear 
excursions. See burst, prompt; excursion, nuclear. 
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prompt criticality: State of a fissile system such that 
the prompt-neutron contribution to k eff equals unity. 
See multiplication factor. 

prompt neutrons: Neutrons emitted immediately 
during the fission process. See delayed neutrons. 

quality factor (QF): The linear 

energy-transfer-dependent factor by which absorbed 
doses are multiplied to obtain, for 
radiation-protection purposes, a quantity that ex¬ 
presses on a common scale the biological effective¬ 
ness of the absorbed dose derived from various 
radiation sources. Approximately the ratio of dose 
equivalent and absorbed dose. See absorbed dose, 
dose equivalent, linear energy transfer 

quenching mechanism: Physical process other than 
mechanical damage that limits an excursion spike. 
Examples are thermal expansion, or microbubble 
formation in a solution. See spike (in a prompt power 
excursion). 

rad: A unit of absorbed dose; 1 rad = 10' 2 J/kg of the 
medium. In 1976, the International Conference on 
Weights and Measures adopted the gray 
(1 Gy = 1 J/kg) as the preferred unit of absorbed 
dose, but the gray has not appeared in the 
criticality-accident literature, which was essentially 
complete before that date. See absorbed dose, gray, 
and discussion under personnel monitor. 

radiation: In context of criticality safety, alpha par¬ 
ticles, beta particles, neutrons, gamma rays, and 
combinations thereof. See alpha particle, beta 
particle, neutron, x-ray. 

reactivity: A parameter of a fissile system that is 

proportional to 1 - l/k eff . Thus, it is zero if the system 
is critical, positive if the system is supercritical, 
negative if the system is subcritical. See dollar, cent, 
and inhour , which are various units of reactivity; 
multiplication factor. 

reactivity, uncompensated: The reactivity that would 
pertain to a fissile system if the state of the system 
were not altered by its power.* 

reflector: Material outside the core of a fissile system 
capable of scattering back to the core some neutrons 
that would otherwise escape. See core, fissile system. 

reflector savings: The absolute difference between a 
dimension of the reflected core of a critical system 
and the corresponding dimension of a similar core 
that would be critical if no reflector were present. See 
core, fissile system, reflector. 

relative biological effectiveness (RBE): A factor used 
to compare the biological effectiveness of absorbed 


*Not a part of the original glossary, LA-11627-MS. 101 


radiation doses (rads or grays) because of different 
types of ionizing radiation; more specifically, it is the 
experimentally determined ratio of an absorbed dose 
of a radiation in question to the absorbed dose of a 
reference radiation required to produce an identical 
biological effect in a particular experimental organ¬ 
ism or tissue. This term should be used only in 
radiobiology, not instead of quality factor in radia¬ 
tion protection. See quality factor. 

rem: A unit of dose equivalent (roentgen equivalent, 
man), replaced by the sievert, which was adopted in 
1980 by the International Conference on Weights and 
Measures. The sievert, however, has not appeared in 
the criticality-accident literature. See dose equiva¬ 
lent, sievert. 

rep: An obsolete term for absorbed dose in human 
tissue, replaced by rad. Originally derived from 
roentgen equivalent, physical. 

risk: The cost of a class of accidents over a given 
period, usually expressed as dollars or fatalities, per 
year or during plant lifetime. Unless established by 
experience, risk is estimated as the product of the 
probability of occurrence and the consequence of the 
accident type. Not to be confused with hazard. See 
hazard. 

roentgen (R): A unit of exposure; 1 R = 2.58 x 10-4 
coulombs/kg in air. Strictly, the roentgen applies to 
x-rays or gamma radiation, although in one report of 
a criticality accident beta “dosages” were expressed 
in units of R. See exposure. 

scram: An alternative term for reactor trip. 

shutdown mechanism: Quenching mechanism and 
mechanical damage, if any, that limits a 
prompt-power excursion spike. See excursion, 
prompt power; quenching mechanism; spike. 

sievert (Sv): A unit of dose equivalent; 

1 Sv = 1 J/kg =100 rem. Adopted in 1980 by the 
International Conference on Weights and Measures 
to replace the rem. See dose equivalent, rem. 

spike (in a prompt-power excursion): The initial 
power pulse of a prompt-power excursion, limited by 
the shutdown mechanism. See excursion, prompt 
power; shutdown mechanism. 

tuballoy (Tu): A wartime term for natural uranium, 
originating in England; now obsolete. See oralloy. 

uranium enrichment (enrichment): The weight 
percentage of 235 U in uranium, provided that 
percentage exceeds its natural value; if the reference 
is to enhanced 233 U content, then “ 233 U enrichment” 
should be specified. 

x-ray: Electromagnetic radiation of wavelength in the 
range 10' 10 cm to 10" 6 cm. 
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APPENDIX B 

EQUIPMENT DIAGRAMS AND TABULAR PHYSICAL AND YIELD DATA 
FOR THE 22 PROCESS ACCIDENTS 


Part I contains a section immediately following the description of the 22 nd accident entitled, 
“Physical and Neutronic Characteristics for the Process Facility Criticality Accidents.” Therein 
are described the many unknowns, approximations, and uncertainties associated with the simpli¬ 
fied re-constructions and data tabulations. The yield and specific yield values in the tables of this 
appendix are reported in units of fissions and fissions per liter, respectively. 

This same information is presented here in a new format to facilitate an understanding of the 
approximate geometry and yield data associated with each process accident. While this informa¬ 
tion would never qualify as benchmark data (computations could be performed, but the value of 
the answers would be highly questionable), it may prove useful to students and teachers at uni¬ 
versities and to criticality staff as they provide (training) lectures to operating personnel. 
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1. Mayak Production Association, 15 March 1953 

Plutonium nitrate solution in an interim storage vessel; single excursion; one 
serious exposure, one significant exposure. 


CJ> 



Estimated Spherical 
Critical Mass 

0.67 kg 

First Spike Yield 

unknown 

Specific Spike Yield 

unknown 

Total Yield 

~2.0x10 17 


Vessel Volume 

40.0 £ 

Fissile Volume 

31.0 £ 

Fissile Mass 

0.81 kg 

Fissile Density 

26.1 g/£ 
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2. Mayak Production Association, 21 April 1957 

Uranium precipitate, U(90), buildup in a filtrate receiving vessel; excursion 
history unknown; one fatality; five other significant exposures. 



< -650 mm- > 



Vessel Volume 

100.0 £ 

Fissile Volume 

30.0 £ 

Fissile Mass 

3.06 kg 

Fissile Density 

102.0 q/£ 


Estimated Spherical 
Critical Mass 

1.09 kg 

First Spike Yield 

unknown 

Specific Spike Yield 

unknown 

Total Yield 

~1 .OxlO 17 
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3. Mayak Production Association, 2 January 1958 

Uranyl nitrate solution , U(90), in an experiment vessel; one prompt critical 
burst; three fatalities; one serious exposure. 
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5. Los Alamos Scientific Laboratory, 30 December 1958 

Plutonium organic solution in an organic treatment tank; single excursion; one 
fatality, two significant exposures . 



Estimated Spherical 
Critical Mass 

0.84 kg 

First Spike Yield 

1.5x10 17 

Specific Spike Yield 

0.94x10 15 

Total Yield 

1.5x10 17 


Vessel Volume 

982.0 £ 

Fissile Volume 

160.0 £ 

Fissile Mass 

2.94 kg 

Fissile Density 

18.4 g/£ 
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6. Idaho Chemical Processing Plant, 16 October 1959 

Uranyl nitrate solution , U(91), in a waste receiving tank; multiple excursions; 

two significant exposures. 



Vessel Volume 

18,900 e 

Fissile Volume 

800.0 i 

Fissile Mass 

30.9 kg 

Fissile Density 

38.6 g/f 


Estimated Spherical 
Critical Mass 

1.24 kg 

First Spike Yield 

-I.OxlO 17 

Specific Spike Yield 

~0.1 xIO 15 

Total Yield 

400x10 17 
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7. Mayak Production Association, 5 December 1960 

Plutonium carbonate solution in a holding vessel; multiple excursions; 

insignificant exposures . 



127 






8. Idaho Chemical Processing Plant, 25 January 1961 

Uranyl nitrate solution , U(90), in a vapor disengagement vessel; multiple 
excursions; insignificant exposures. 



Vessel Volume 

461.0 £ 

Fissile Volume 

40.0 £ 

Fissile Mass 

7.20 kg 

Fissile Density 

180.0 q/£ 


Estimated Spherical 
Critical Mass 

2.48 kg 

First Spike Yield 

~0.6x10 17 

Specific Spike Yield 

1.5x10 15 

Total Yield 

6.0x10 17 
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9. Siberian Chemical Combine (Tomsk), 14 July 1961 

Uranium hexafluoride, U(22.6), accumulation in a vacuum pump oil reservoir; 
two excursions; one significant exposure. 




Estimated Spherical 
Critical Mass 

0.9 kg 

First Spike Yield 

none 

Specific Spike Yield 

none 

Total Yield 

0.12x10 17 


Vessel Volume 

65.0 e 

Fissile Volume 

42.9 i 

Fissile Mass 

1.68 kg 

Fissile Density 

39.2 g/£ 
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11. Mayak Production Association, 7 September 1962 

Plutonium nitrate in a dissolution vessel; three excursions; insignificant 

exposures . 



Estimated Spherical 
Critical Mass 

1.05 kg 

First Spike Yield 

none 

Specific Spike Yield 

none 

Total Yield 

~2.0x10 17 


Vessel Volume 

100.0 t 

Fissile Volume 

80.0 l 

Fissile Mass 

1.26 kg 

Fissile Density 

15.8 qI£ 




















12. Siberian Chemical Combine (Tomsk), 30 January 1963 

Uranyl nitrate solution, U(90), in a collection vessel; multiple excursions; 

insignificant exposures . 
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13. Siberian Chemical Combine, 2 December 1963 

Uranium organic solution, U(90), in a vacuum system holding vessel; multiple 
excursions; insignificant exposures. 



Vessel Volume 

100.0 t 

Fissile Volume 

64.8 e 

Fissile Mass 

1.93 kg 

Fissile Density 

29.8 g !i 


Estimated Spherical 
Critical Mass 

1.38 kg 

First Spike Yield 

none 

Specific Spike Yield 

none 

Total Yield 

0.16x10 17 


















14. United Nuclear Fuels Recovery Plant, 24 July 1964 

Uranyl nitrate solution, U(93), in a carbonate reagent makeup vessel; two 
excursions; one fatality, two significant exposures. 
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15. Electrostal Machine Building Plant, 3 November 1965 

Uranium oxide slurry ; U(6.5), in a vacuum system vessel; single excursion; 

insignificant exposures . 
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16. Mayak Production Association, 16 December 1965 

Uranyl nitrate solution, U(90), in a dissolution vessel; multiple excursions; 

insignificant exposures. 



Estimated Spherical 
Critical Mass 

1.65 kg 

First Spike Yield 

none 

Specific Spike Yield 

none 

Total Yield 

-5.5x10 17 


Vessel Volume 

100.0 t 

Fissile Volume 

28.6 t 

Fissile Mass 

1.98 kg 

Fissile Density 

69.2 gl£ 
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17. Mayak Production Association, 10 December 1968 

Plutonium solutions (aqueous and organic) in a 60 liter vessel; three excursions 

one fatality, one serious exposure. 


565 mm 


262 mm 


57 mm 


-187 mm- 


Vessel Volume 

62.1 t 


Estimated Spherical 
Critical Mass 

1.36 kg 

Fissile Volume 

28.8 t 


First Spike Yield 

0.3x10 17 

Fissile Mass 

1.50 kg 


Specific Spike Yield 

I.OxlO 15 

Fissile Density 

52.1 qU 


Total Yield 

~1,3x10 17 




















19. Idaho Chemical Processing Plant, 17 October 1978 

Uranyl nitrate solution , U(82), in a lower disengagement section of a scrubbing 
column; excursion history unknown; insignificant exposures. 
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20. Siberian Chemical Combine (Tomsk), 13 December 1978 

Plutonium metal ingots in a storage container; single excursion; one serious 
exposure, seven significant exposures. 



Estimated Spherical 
Critical Mass 

9.18 kg 

First Spike Yield 

0.03x10 17 

Specific Spike Yield 

5.6x10 15 

Total Yield 

0.03x10 17 


Vessel Volume 

3.2 e 

Fissile Volume 

0.54 i 

Fissile Mass 

10.1 kg 

Fissile Density 

18,700 git 
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21. Novosibirsk Chemical Concentration Plant, 15 May 1997 

Uranium oxide slurry and crust, U(70), in the lower regions of two parallel 
vessels; multiple excursions; insignificant exposures. 


<—800 mm—> 


Vessel Length = 2000 mm 


-100 mm 



Vessel Volume 

700.0 £ 
per vessel 

Fissile Volume 

* 

Fissile Mass 

17.1 kg 

Fissile Density 

* 


Estimated Spherical 
Critical Mass 

* 

First Spike Yield 

none 

Specific Spike Yield 

none 

Total Yield 

0.055x10 17 


System description was not adequate to estimate parameter. 
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